×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question
connoroni2
Engager
Member since: ‎06-18-2020
‎06-25-2020
Community Statistics
Posts 2
Solutions 0
Karma Given 0
Karma Received 0
Member Since ‎06-18-2020
View All

Re: Plotting failure/pass percentage of job result...

by in Dashboards & Visualizations
‎06-25-2020 01:36 PM
‎06-25-2020 01:36 PM
Hi @rnowitzki . Many thanks for the help! I think it's the standard 'forest in the trees' view of things that I couldn't see the solution.😀 As per your comment for my variable names. I plead guilty. 😀 When I was scrubbing my query to display it publicly, I got lazy and didn't fully form my temporary variable names.  I performed some modifications to limit the precision of my calculations as well as the variable names. With that said, here is my final search string: ... BASE SEARCH ... | timechart count(eval(match(job_result, "FAILURE"))) AS Failed, count(eval(match(job_result, "SUCCESS"))) AS Passed, count(eval(match(job_result, "ABORTED"))) AS Aborted count as Total | eval percF = round((Failed/Total)*100,2), percS=100-percF, percA = round((Aborted/Total)*100,2) | rename percF as FailureRate, percS as SuccessRate, percA as AbortedRate Thanks again for your help. ... View more

Plotting failure/pass percentage of job results ov...

by in Dashboards & Visualizations
‎06-23-2020 12:33 PM
‎06-23-2020 12:33 PM
Hi, I am attempting to chart the calculated pass and failure percentages over time along with the total passed and failed jobs. I can successfully create a table that shows the FailureRate and SuccessRate along with my passed and failed totals by using this syntax: ...BASE SEARCH... | stats count(eval(match(job_result, "FAILURE"))) AS Failed, count(eval(match(job_result, "SUCCESS"))) AS Passed, count(eval(match(job_result, "ABORTED"))) AS Aborted count as t | eval s = t-f, percF = (Failed/t)*100, percS=100-percF | rename t as Total, percF as FailureRate, percS as SuccessRate | table Total Passed Failed Aborted FailureRate SuccessRate When I attempt to make this a chart over time I am not able to overlay the FailureRate and SuccessRate over the same timechart. (Note I had to change to stats count(...) to streamstats(...) to get any output of the total passed, failed, aborted) .  ...BASE SEARCH... | streamstats count(eval(match(job_result, "FAILURE"))) AS Failed, count(eval(match(job_result, "SUCCESS"))) AS Passed, count(eval(match(job_result, "ABORTED"))) AS Aborted count as t | eval s = t-f, percF = (Failed/t)*100, percS=100-percF | rename t as Total, percF as FailureRate, percS as SuccessRate | timechart count by job_result I am unsure why I am not able to overlay the FailureRate and SuccessRate calculations over time to see the changes as time goes by. Any help is appreciated as I have scoured this site for some hints on what I am doing wrong. Thanks!  ... View more
Labels
Contact Me
Online Status
Offline
Date Last Visited
‎06-25-2020 04:58 PM