Hello everyone,
I need your help for something, please.
I need to remove the decimal value for this fields:
- total
- hier
My spl request is :
| union [ search index="pasrau_statuts_...
See more...
Hello everyone,
I need your help for something, please.
I need to remove the decimal value for this fields:
- total
- hier
My spl request is :
| union [ search index="pasrau_statuts_count" libelle IN ("Envoi SNGI OK", "Envoi SNGI KO", "RECU") | lookup lk_etapes_pasrau_2020_rj libelle output evenement, ordre ] | join type=outer libelle [ search index=pasrau_statuts_count earliest=-100d@d latest=@d libelle IN ("Envoi SNGI OK", "Envoi SNGI KO", "RECU") | eval hier=count | table libelle hier ] | eval delta=case(hier < count, "+".(count-hier), hier > count, "-".(hier-count), hier=count, "0") | eval libelle=ordre+libelle, total=ordre+"."+count, hier=ordre+"."+hier | dedup libelle sortby lookup |stats list(libelle) as libelle , list(total) as total list(hier) as hier list(delta) as "DeltaJ/J-1" by evenement | sort libelle |rex field=libelle mode=sed "s/^[0-9]+//g" |rex field=total mode=sed "s/^[0-9]\.+//g" |rex field=hier mode=sed "s/^[0-9]\.+//g"
Thank you so much