You're right.  It is still showing same amount in every interval. Thanks a lot. ... View more

Thanks a lot Giuseppe! Sincerely appreciate your quick response. I'm getting error percentage now. One small problem: for all the 5 minute spans throughout last 24 hour, I'm getting exactly same number of both total event and error as well. So the error percentage is constant over time (Error count: 106, Event count: 1525, percentage: 6.95%). I know this is not correct. Number of events vary over peak and off-peak hour. Do you think it's calculating same data and plotting over different time? This is my current script looks like: index=my_index CAT=B | bin span=5m _time | stats count(eval(RESULT="404")) AS Error_count count BY _time | eval Error_Percentage=round(Error_count/count*100,4)   ... View more