Quantcast
Viewing all articles
Browse latest Browse all 47296

In splunk to find percentage difference for each column

I need to find the difference between each date for each App_name in splunk Right now my query just show the today number of record recieve each day per topic name/ Appname. I want to find out the percentage difference of record for each day from its previous day. index="platform" sourcetype="logs" | rex "sent:\s(?\d+)\sfrom the file\s:\s(?[\w\.\/\_\-]+)\s" | rex field=source "\.(?[\w\/\_\-]+)\." | timechart span=24h sum(record) as records by topic_name Can someone help

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>