I have the following search:
index="data_integration" host="sampledata" sourcetype="csv" Object_Account="4*" OR Object_Account="5*"|stats sum("Domestic _Amount") AS CM
and the following second search:
index="data_integration" host="sampledata" sourcetype="csv" Object_Account="4*"| stats sum("Domestic _Amount") AS Sales
I want to be able to divide CM/Sales. What is the best command or the best way to join these two searches in order to do the division?
↧