I would like to put response time in three buckets. low < 1 second, medium < 2 second, high > 2 second. I would like to calculate % response time in low medium and high buckets.
The following is the query:
sourcetype="jboss" TOTAL SEARCH TIME CAREWEB | eventstats count as total |eval rp=EASYDOC_JBOSS_TIME/1000 | rangemap field=rp low=0-1.0 medium=1-2 high=2-100 | stats count by range
Eventhough I see total in the fields, I am not able to use it in the eval to calculate %
as per SLA I have to have produce a graph that shows that 99% of responsetime is less than 1 second
Thanks,
... View more