Hi there, I have s splunk search command as follows, it have [year_month, service_label, condition, value] |inputlookup druid_availability_lookup.csv |stats sum(good_events) as good_events, sum(total) as total by year_month |eval service_label = "Druid Data Service-availablity", value=round((good_events/total)*100, 2), condition= if(value<=100, "Fail","") |table year_month, service_label, condition, value And i want to displays this result by year_month, when i append commans [|chart values(value) over service_label by year_month] , it will displays as follows, the condition column will be losed. Is there any methods that can display the result by year_month and also include the condition parameters, thanks
... View more