I've this | eval status=if(CODE=200,"success","failure")
i need to have 3 fields like success, failure , total
I'm trying this
| stats eval(if(c(CODE=200))) as success
but its not working
Could you please help ?
Hi @Mohsin123
Can you try this
| stats count(eval(CODE="200")) as "success" count(eval(CODE="<addcodenumber>")) as "failure" count(CODE) as "total"
Hi @Mohsin123
Can you try this
| stats count(eval(CODE="200")) as "success" count(eval(CODE="<addcodenumber>")) as "failure" count(CODE) as "total"