Hello,
01/10/2019 63 7,821428776 1 59,000000000
02/10/2019 57 5,666666508 0 0
03/10/2019 77 5,640625000 2 3,000000000
...
I have to monthly chart a value obtained from the following rule:
I was able to get the value using this query by setting the time keeper on search (previous month or advanced function)
index=rl_ivr
| eval A=if(like(source,"%HD%"),call_offered,0)
| eval nn=tonumber(replace(replace(avg_aban_time,".",""),",","."))
| stats sum(eval(if((nn > 15),num_call_aban,0))) as abbandonate sum(A) as chiamate
| eval sla11 = ((abbandonate / chiamate) * 100)
| table sla11
how can I build a serach to get the value for every month ?
Many thanks,
G.
| makeresults count=2
| streamstats count
| eval _time = if (count==2,relative_time(_time,"-1month@month"), relative_time(_time,"@d"))
| makecontinuous span=1d
| eval col1=random() % 20, col3=random() % 20
| eval col2=round(random() % 50,8),col4=round(random() % 50,8)
| eval sourcetype="three_files"
| fields - count
| append
[| makeresults
| eval _time = relative_time(_time,"-1month@month")
| eval col6=1337, sourcetype="forth_file"]
| where _time < relative_time(now(),"@month")
| reverse
`comment("this is sample data")`
| stats sum(eval(if(col4 > 15,col3,NULL))) as abbandonate values(col6) as chiamate
| eval sla11 = ((abbandonate / chiamate) * 100)
HI, please adjust the time with the time picker.
thanks for the answer, I will try