Hello Splunk Enthusiast,
Let say I have an index that contains our player base, their gamer scores, their global rank, and the region they play the game in.
In separate search, I calculated the percentage of our players based on the region. The results came back that 70% of our users play in NA, 20% of our users play in SA, and10% of our users play in EU.
I want to create a query that looks at the index and returns the top users based on their global rank, region, and the percentage of our player base.
Example: Lets say the index ranks 2000 users and I want to see the top 100 users. Then 70% of those users must come from NA, 20% must come from SA, 10% players in EU. An additional condition is that this must return the top 100 users regardless of their global rank. If the global_rank of the best SA user is rank 75 and NA users are rank 1-74, then the query must still return the top 70 NA users and whatever global rank the top users from the SA region fall at.
Is there a simple way I can get these values using a combination of stats, top, etc?
... View more