Solved: Re: Percent search

aalaa · ‎03-21-2019

Hello ,

I have a table, each line of this table has a specific value, I need a search command to calculate the percentage of each line on the sum of these values .

Any help please ?
Thanks

harsmarvania57 · ‎03-21-2019

Hi,

Please try below query, replace <fieldname> with actual fieldname.

<yourBaseSearch>
| eventstats sum(<fieldname>) as total
| eval percentage=(<fieldname>/total)*100

View solution in original post

harsmarvania57 · ‎03-21-2019

Hi,

Please try below query, replace <fieldname> with actual fieldname.

<yourBaseSearch>
| eventstats sum(<fieldname>) as total
| eval percentage=(<fieldname>/total)*100

aalaa · ‎03-21-2019

it's work ! thanks

Percent search

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Build resilience for the agentic era: Join us at Splunk Go San Jose

Manage Edge Processor pipelines end to end with APIs

Join the Conversation