Hey everyone,
I've got a search
search = *
| eval _time=_time - (6*60*60)
| bucket _time span=1d
# Takes the current time and rolls it back six hours. We operate on a 6am-6am reporting schedule.
| eval MaterialType = case(match(lotNumber,"regex") OR lotNumber = "WasteLots","Waste",match(field1,"regex"),"Production")
# Designates each event as a waste event (using the Lot #) or a production event (using the value in field1)
| where isnotnull(MaterialType)
| eval time = strftime(_time,"%m/%d/%y")
| chart sum(netWeightQty) by time, MaterialType
| eval _time=_time + (6*60*60)
Now this | chart generates the following:
How can I get a value, for each date, of Waste% = 100 * Waste / (Production + Waste)?
Thanks!
... View more