I have a search successfully generate a dynamic table BUT I couldn't add a static column called baseline:
I tried to use below search to add baseline according to apiName, but couldn't get it to produce the result:
index=* sourcetype=log
|eval baseline=case(apiName=="apiA_MS",200,apiName=="apiB_MS",300,apiName=="apiC_MS",400)
| eval temp=1
| table api*MS
| untable temp apiName response_time
| stats avg(response_time) as avg_ms, max(response_time) as max_ms, min(response_time) as min_ms by apiName
|table apiName, baseline,avg_ms,max_ms,min_ms
| eval avg_ms=round(avg_ms)
I want to see result as below with baseline added
apiName baseline avg_ms max_ms min_ms
apiA_MS 200 100 200 50
apiB_MS 300 250 350 100
apiC_MS 400 350 500 200
Appreciate your help.
... View more