I get the searching
sourcetype="evento_notable" | dedup KPI | eval kpica=case(ClientesActivos <=15000, 90, ClientesActivos >=15001 AND ClientesActivos <=16999, 100, ClientesActivos >=17000,90), kpicc=case(ConexionesConcurrentes <=300000, 90, ConexionesConcurrentes >=300001 AND ConexionesConcurrentes <=1799999, 100, ConexionesConcurrentes >=180000,90), Vel=E_speed/1048576, kpivl=case(Vel <=5 , 50, Vel >=5.1 AND Vel <=15, 60, Vel >=15.1 AND Vel <=19.99 , 70, Vel >=20, 100), kpidns=case(time_request >=2 , 50, time_request <=1.99 AND time_request >=1.01, 70, time_request <=1 AND time_request >=0.8 , 90, time_request <0.8, 100), kpign= (kpica+kpicc+kpivl+kpidns)/4 | stats avg(kpign) as "Networking health"
the sentense "kpign= (kpica+kpicc+kpivl+kpidns)/4" not get the field "kpign"
... View more