help on where clause

[jip31]

hi

why my where condition doesnt works please?

`boot` 
| fields host Name Path DegradationTime 
| stats max(DegradationTime) as DegradationTime by Path 
| where DegradationTime>1
| eval "DegradationTime" = round(('DegradationTime' / 1000),0) 

[kamlesh_vaghela]

@jip31 

Can you please share sample OP from this? 

| fields host Name Path DegradationTime 
| stats max(DegradationTime) as DegradationTime by Path 

[jip31]

Hi

Here is

https://www.cjoint.com/c/KCkjPaFQdbb

[kamlesh_vaghela]

It looks you rename DegradationTime field.. Did you tried where condition before rename?? It's working for me.

[jip31]

I dont understand

something like this??

| stats  max(DegradationTime) as "DegradationTime" by Path 
| eval "DegradationTime" = round(('DegradationTime' / 1000),0) 
| where DegradationTime>1 
| rename DegradationTime as "Degradation time (seconds)" 

[kamlesh_vaghela · Accepted solution]

Yes..
I tried this..

| makeresults
| eval DegradationTime="100000" ,Path="C:"
| stats max(DegradationTime) as "DegradationTime" by Path
| eval "DegradationTime" = round(('DegradationTime' / 1000),0)
| where DegradationTime>1
| rename DegradationTime as "Degradation time (seconds)"

[jip31]

yes it works now thanks