Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Do we need to use a subsearch to divide the results of one search by the results of another search to find a percentage?

$
0
0
Hi, We are looking for timeout percentage from the total events. For Ex: 1. Query1: index=datapower Time=*|stats count 2. Query2: index=datapower Time>10000|stats count Now we are looking for results as **Query1/Query2**. Do we need to do this with subsearch? Can anyone help with this? Thanks

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>