Splunk Search

How to display data value in percentage

sebastiangohhy
Engager

Hi there,
Im trying to display the data values in percentage. How can i do it?
Thanks

alt text

Tags (1)
0 Karma
1 Solution

cmerriman
Super Champion

you want Correct to be %Correct=(Correct/(Correct+Wrong)) for example?

try this:

index="cyber_wellness" sourcetype="csv"|chart count over Stage by CorrectAns
|eval %Correct=round((Correct/(Correct+Wrong))*100,2)|eval %Wrong=round((Wrong/(Correct+Wrong))*100,2)
|fields Stage %Correct %Wrong

View solution in original post

cmerriman
Super Champion

you want Correct to be %Correct=(Correct/(Correct+Wrong)) for example?

try this:

index="cyber_wellness" sourcetype="csv"|chart count over Stage by CorrectAns
|eval %Correct=round((Correct/(Correct+Wrong))*100,2)|eval %Wrong=round((Wrong/(Correct+Wrong))*100,2)
|fields Stage %Correct %Wrong

sheamus69
Communicator

You may be able to achieve this using the eventstats command.

See https://answers.splunk.com/answers/9660/stats-count-as-a-percentage-as-the-total.html for an example.

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...