Below query is working fine But i want to include date wise success and failures for comparison.
(index="x") AND (host="y") status > 199 AND status < 400
| stats count as Success BY application, methodPath | join methodPath type=left
[search (index="x") AND (host="y") status > 400
| stats count as Failures BY application, methodPath] | table application, methodPath, Success, Failures | sort by Success DESC | sort by Failures DESC
My table should like.
application, methodPath, Success(3/09/2018), Failures(3/09/2018), Success(3/10/2018), Failures(3/10/2018) etc.
Or application, methodPath, 3/09/2018 -Success, Failures, 3/10/2018 Success, Failures.
Any better way also welcome.
Thank you.
... View more