Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to develop a timechart by host with eval command?

$
0
0
Hi, I have the below search to find the SLA of my application **by host** in the specific time span. But I don't know why it won't show up SLA some search | timechart span=30m count as VOLUME count(eval(respTime<=10)) as COUNT by host | eval SLA=COUNT/VOLUME*100 I want to show SLA and VOLUME together in the line graph so I tried below but it didn't work some search | timechart span=30m count as VOLUME count(eval(respTime<=10)) as COUNT by host | eval SLA=COUNT/VOLUME*100 | fields + _time VOLUME SLA Can someone help? Thanks!

Viewing all articles
Browse latest Browse all 47296

Trending Articles