I am using below query to get search result and calculate the failure percentage but not getting the expected result. index=dl* ("Error_MongoDB") | timechart span 1d count as Failure | appendcols...
...ourceA
PRIORITY="High" OR
PRIORITY="Medium" OR
PRIORITY="Low"
WAS_CRITICAL="yes"
| eval _time=strptime(FIRST_SOLVED_DATE,"%Y-%m-%d %H:%M:%S.%N")
| timechart span=1mon count as Total
| appendcols [s...
hi
I use the search below in order to calculate a percentage but I have a wrong result
I am explaining
When I execute the first part of the search (before appendcols), I have 66 events for t...
I wonder if someone can help me out with an issue I'm having using the append, appendcols, or join commands. Truth be told, I'm not sure which command I ought to be using to join two data sets t...
Hi everybody,
I have a problem with an "appendcols" command.
I have a query which needs to count how many times a field's value is above 450, and i need to do that for 4 fields.
It's usually a...
...bsp; index=_pods pod=* project=project_name state="Running" | eventstats latest(_time) as current | where current=_time | stats count as Active by pod | appendcols [| from inputlookup:"l...
I have a combined search query using stats count and appendcols.I am able to display the combined search result in single column -multiple rows format using 'transpose'.But when I click on count v...