Hi,  I'm trying to figure out how to detect if one of our ecommerce integrations has an error and the transactions drop relative to their normal rate.  For example if we see 200 purchases a week and suddenly it goes down to 10. Each purchase has category and storefront ID fields in the events, so I would want to automatically adapt to new storefronts and categories that appear in the events.  The output I would hope to get is an alert when a combo of storefront x with category y has dropped to 70% or less of its normal event rate. Say in a period of a day or a week.  How can you have a search work in that way, where it compares its results in this period to the previous period?  Thanks ... View more

I have events with JSON in them and I need to know what % of the time each field appears. The fieldset in the events is not consistent, sometimes an event has many, sometimes only a few, the name of each field is unknown at the time of the search So far I have used rex to extract the JSON, and spath to extract the fields from the JSON. I also used fields - so now the events only have the fields I am interested in. Other than the Time field, if I remove that I get no results. How can I generate a table that shows Field a appears: 40% Field b appears: 80% Field c appears 10% So on... The fields are dynamic in name and occurrence, so I don't know the names at the time of the search. Is there some way to accomplish this? Thanks, ... View more