If I have something like page views by platform:
search ...
| stats sum(page_views) by platform
which correctly gives me the absolute counts.
I'd like to also output the % by platform too. Any idea?
If you only have a few platforms, this might be useful:
http://splunk-base.splunk.com/answers/26926/percent-of-subtotals
If you only have a few platforms, this might be useful:
http://splunk-base.splunk.com/answers/26926/percent-of-subtotals
Beautiful! It worked thanks.