Hi experts, I was stuck in a quandary when I was trying to see which of my customer base was using optimization mode and I needed to get the percentage of optimization patterns used for each org sorted by orgId, so I tried using the following statement. index=* type=* orgId=* | eval Mode = case(type ==" non_opt", "None-Optimized", type=="opt", "Optimized") | stats count by Mode, orgId | sort count | stats list(Mode), list(count) by orgId But so far I only got the number of opt/non-opt users sorted by orgId, actually I want to calculate the value or percentage of opt/(opt + non-opt) and output the result grouped by orgId. How should I do?...
... View more