Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How could I chart ratio of counts of field values?

$
0
0
Hi, suppose my events contain this field with two possible values: Ok=True or Ok=False Every hour I'll have a certain number ('TTT') of True values and a certain number ('FFF') of False values. I want to create a chart that shows the failure rate (FFF/(TTT+FFF)) for any given time bucket size. Is that possible please? Thanks in advance.

Viewing all articles
Browse latest Browse all 47296