here is my search, I'm trying to create a report that shows the **error count**, **error percentage**, and **total transaction count**...
| dedup TransactionID | stats count As ErrorCount by TransactionName | appendcols [search Message="Calling ProcessRequest" | stats count as TotalTransactionCount by TransactionName ]|eval ErrorPerc= if (isnull(ErrorCount), 0, ErrorCount/TotalTransactionCount) | fieldformat ErrorPercentage = tostring(round(ErrorPerc,6)*100)."%" | Table TransactionName ErrorPercentage ErrorCount ErrorPerc TotalTransactionCount | fillnull value=0 | sort -ErrorCount
If I don't include **ErrorPerc** in the table, **ErrorPercentage** shows up as null. I really don't want **ErrorPerc** in there since it's less readable and a duplicate of **ErrorPercentage**
Dan
↧