Hi , I need to find the average throughput of the sales transaction.ie no of requests /no of responses * 100 .. so i have used the subsearch like this ..but couldnt get the results.. soucetype="X" POST [ soucetype="X" GET | stats count as TotalReq ] | stats count as TotalRes | eval Throughput=(TotalReq*100)/TotalRes | table Throughput But this didnt work..need help on this.. ... View more

Hi.. My search query displays the search results in the form of a table like this... SearchParameter A B C D E xyz 9 4 10 5 6 where xyz is the search parameter .actually i need the table to be sorted like this... SearchParameter B D E A C xyz 4 5 6 9 10 tried sort command but couldn't get the desired results .. My search Query is like this... sourcetype="X" (somelogic) | transaction keepevicted=true searchparameter | chart avg(duration) by eventtype,searchparameter Thanx ... View more

Hi I have created 21 eventypes for my requirement.In tat 21 eventypes when i write a query only few eventtypes are involved . how do we indentify those eventtypes ?? and after identifying the eventtypes i need to print a table which shows the time duration taken for each eventype. for Example assuse I have 21 eventtypes with names A,B,C,D...U .My requirement is i need to pass a searchparameter to a searchquery , which on excuting only involves few eventypes ..i need to indentify them and print the dimension duration spent for each eventype.assue A,B and D are the eventtypes involved for my searchquery with the given searchparameter value.. Now i need the table like this. SearchParameter A B D AAA 34 45 45 where A,B,D are the involved eventypes for the searchquery with searchparameter "AAA" and 34,45,45 are the duration time in secs spent at eventtype..Please reply asap.Thnx in advance.. ... View more

Hi , I have created a form with a dropdown box and a textbox ..when a change a value in dropdown box my query should change.For example i have three queries like this Query 1 : sourcetype="X" | somelogic | where cond = $search parameter $ Query 2 : sourcetype="Y" | somelogic | where cond = $search parameter $ Query 3 : sourcetype="Z" | somelogic | where cond = $search parameter $ where search parameter is the value given in the textbox.my requirement i have three values in the dropbox say A,B,C.if i select A Query1 should excute with the value given in the textbox as searchparameter..How can i do this.. Please help me on this.. thanx ... View more

Hi All Can we Drilldown the singlevalue chart in to three other singlevalue charts.i.e by the click on the one singlevalue it should further drill down to three other drilldown singlevalue charts. please help me on this Thanks. ... View more

Hi , I was using a speedometer chart for displaying the response time.Can i drilldown the same speedometer chart in to three separate speedometer charts..Please help me on this.. Thanks. ... View more