All Apps and Add-ons

Getting difference of two string values and calculating percentage

sowmya_kn
New Member

There are two strings "abc" and "xyz", some values are assigned to the strings;
suppose say
abc: 50 and xyz: 45

I want to write a quarry which yields a result like

Result = (abc-xyz)
and compare if result >= 75%

Please help me in this.Thanks in advance.

0 Karma

kristian_kolb
Ultra Champion

Your question is lacking a bit of information;

  • 75% of what?
  • Is abc always larger than xyz?

Anyway, here are a few examples of some arithmetic operations, but you should look up these pages as well;

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Eval
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonEvalFunctions

your search here | eval diff = abc - xyz |



your search here | eval absdiff = abs(abc - xyz) |



your search here | eval ratio = xyz/abc |



your search here | eval ratio = xyz/abc | where ratio >=0.75

/K

0 Karma

kristian_kolb
Ultra Champion

So the last of my examples should fit you nicely. Please upvote and/or mark the answer as accepted if your problem was solved.

/K

0 Karma

sowmya_kn
New Member

75% of abc
yes abc is always larger than xyz

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...