I have my events in the following format:
{
"a": {
"b": {
"c1": {
"d1": value1
"d2": value2
}
"c2": {
"d1": value1
"d2": value2
}
}
}
}
I am trying to calculate the 50th percentile of value1 grouped by c1, c2, etc.
I tried the following, but it does not work.
| stats perc50(a.b.*.d1) by a.b.*
Do I need to use regex for this?
HI jpedrofs,
1-The function perc50( ) works on a field of numerical values.
for example if Y is a field with the following values 10,9,8,7,6,5,4,3,2,1
perc50(Y) =6
2-As i'm seeing your data if a ,b ,c........are integers then you have to extract each set an put them in filds.