I have two query
1: sourcetype=A error=499
2: sourcetype=A X=*
2nd query is almost equal to total transactions.
I would like to make timechart of % of error count on X events.
Basically I want to make timechart that will tell if error code increase is because of volume increase etc,
↧