Hi Rich, since i am breaking them into separate columns - i used this using if condition | eval TwoXXonly=if(status_code>=200 and status_code <300,1,0) | eval FourXXonly=if(status_code>=400 and s...
See more...
Hi Rich, since i am breaking them into separate columns - i used this using if condition | eval TwoXXonly=if(status_code>=200 and status_code <300,1,0) | eval FourXXonly=if(status_code>=400 and status_code <500,1,0) | eval FiveXXonly=if(status_code>=500 and status_code <600,1,0) | stats sum(TwoXXonly) as Total_2xx, sum(FourXXonly) as Total_4xx,sum(FiveXXonly) as Total_5xx by date_only, org,cId,pPath, apie,apiPct,envnt | table list of fieds say for ex; in my data today i dont have 300 events but if they show up tomorrow - do i need to explicitly filter them out as i dont need them at all - i have not used the status_code in by clause just confused - should i use the filter to explicitly exclude 300 ?