About SamPask

SamPask · ‎07-16-2014

here's my event line for the question 7/16/14 10:28:45.000 AM Jul 16 10:28:45 10.251.250.222 2014-7-16T10:28:45-08:00 source 14 site=Sao Paulo Campinas, downTimeInSec=736, startTime=2014-07-16T10:16:29-08:00, endTime=2014-7-16T10:28:45-08:00

SamPask · ‎07-16-2014

I'd like to write a report in Splunk that would give me sum(downTimeInSec) as a percentage of total time, 3 days. The search, "site=" |chart sum(downTimeInSec) by site, gives me this 63660-Sao Paulo Campinas 736 I'd like to have something like this: 63660-SaoPauloCampinas 736 .28394% where the 3rd column is calculated as follows ((736 sec * 100%)/(3 days*86400 sec/day)) Thanks in advance for your help.

Posts	2
Solutions	0
Karma Given	0
Karma Received	1
Member Since	‎07-16-2014

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

percent of sum over total elapsed time

Re: percent of sum over total elapsed time

percent of sum over total elapsed time