I'm having trouble writing a search statement that sets the count to 0 when the service is normally.
This is my data example.
name status
A failed
B failed
C failed
A normally
B normally
C normally
Counting with name will also count normally.
I want to count status failed only.
In this case, everything is normally, I want to display 0.
I know this is not correct, but I want to do like this.
|eval A =if((status=failed),count,null)
|stats count as A
I can't think of a conditional statement that counts when the status is failed.
... View more