Your search doesn't make much sense but I have a similar problem to calculate availability:
index=web | stats count(eval(HTTP_statuscode >= 500)) as errors, count as total by index | eval availability=round((1-errors/total)*100,3)
I would really like be able to have a list of maintenance windows that would be excluded from the availability report.
... View more