Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to calculate the difference of two search

$
0
0
Following is my splunk query : index=main "rest/bi/applicationStatus" Action_Response_Time>1 earliest=-1h | eval DBCount =if(_time>relative_time(now(),"-15m") , "CurrentCount","PreviousCount") | chart count over Action_Name by DBCount | eval slowincreasepercent=((CurrentCount-PreviousCount)/PreviousCount)*100 | append [search "rest/bi/applicationStatus" Action_Response_Time>1 | eval DBCount =if(_time>relative_time(now(),"-45m") , "CurrentCount","PreviousCount") | chart count over Action_Name by DBCount | eval slowincreasepercent=((CurrentCount-PreviousCount)/PreviousCount)*100] [1]: /storage/temp/275688-capture.png Kindly refer to my attachment , I would like to know how I can get the diff in percentage between 2 search

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>