So my based search can produce a table stats of deployment, total hit, and time_seconds, I only need one more field that calculate TPS (total_hit/time_seconds). If it's not grouped by, it can produce the TPS. The challenge how to do it if it's grouped by. base search | rex ".*wm-(?<deployment>.*?)-" | addinfo | eval t=info_max_time - info_min_time | stats count as hit max(t) as time_seconds by deployment It resulted in this table. The time_seconds shows 3600 because the date_picker was set to 60 minutes deployment hit time_seconds a 2506 3609.000 b 30285 3609.000 c 2213 3609.000 Actually I only need to get the tps (calculated by hit/time) table which is: deployment tps a ... b ... c ... Any idea to produce this. thanks. PS. already browse through the community but failed to find
... View more
