Solved: Re: Percent search

aalaa · ‎03-21-2019

Hello ,

I have a table, each line of this table has a specific value, I need a search command to calculate the percentage of each line on the sum of these values .

Any help please ?
Thanks

harsmarvania57 · ‎03-21-2019

Hi,

Please try below query, replace <fieldname> with actual fieldname.

<yourBaseSearch>
| eventstats sum(<fieldname>) as total
| eval percentage=(<fieldname>/total)*100

View solution in original post

harsmarvania57 · ‎03-21-2019

Hi,

Please try below query, replace <fieldname> with actual fieldname.

<yourBaseSearch>
| eventstats sum(<fieldname>) as total
| eval percentage=(<fieldname>/total)*100

aalaa · ‎03-21-2019

it's work ! thanks

Percent search

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Join the Conversation