Answers for "how to calculate the Success events percentage based on the time intervals."
https://answers.splunk.com/answers/112975/how-to-calculate-the-success-events-percentage-based-on-the-time-intervals.html
The latest answers for the question "how to calculate the Success events percentage based on the time intervals."Answer by yannK
https://answers.splunk.com/answering/113055/view.html
The appendcols do not insure that the exact same time range from the 2 searches will match.
you should use a bucket _time span and join them on the field _time.
Instead of `|appendcols [`, use `| join _time [`
Also you are using 2 searches (one for success, one for all dashboard and stats), you could try to use only one
please try with something like :
`
index=operartions sourcetype="SView" OR sourcetype="YView" DashboardStatus="*"
| bucket _time span=1d |
| stats count(eval(DashboardStatus="Success")) AS Success count(eval(eventtype="YViewStatus" OR eventtype="SViewStatus")) AS ClientSuccess count(DashboardStatus) AS complete by _time sourcetype
| eval percent=(ClientSuccess*100/complete)
`Fri, 29 Nov 2013 00:34:53 GMTyannK