I am getting this error:
Error in 'EvalCommand': Type checking failed. '/' only takes numbers.
Here is lines of SPL:
| stats count as "Count of Balances", sum(BALANCECHANGE) as "SumBalances" by balance_bin
| eventstats sum("SumBalances") as total_balance
| eval percentage_in_bin = round(("SumBalances" / total_balance) *100, 2)
What could be causing this? Is there a way to olve this without the / symbol?
The eval is trying to divide a string literal ("SumBalances") by a field, which won't work. Replace the double quotes with single quotes or remote the double quotes.
Thank you so much! That worked!
The eval is trying to divide a string literal ("SumBalances") by a field, which won't work. Replace the double quotes with single quotes or remote the double quotes.