My search ends with: ... | stats count(Request) as RequestCnt,  count(FailedRequest) FailedRequestCnt | eval FaildRequestPercentage =  RequestCnt / FailedRequestCnt * 100 How would I specify a trigger for FaildRequestPercentage  > 10? How would I include: RequestCnt, FailedRequestCnt , and FaildRequestPercentage values in my alert message? ... View more

I have a timechart with columns A and B, I would like to add a third column C, where C=A/B My timechart is created by: index=... | timechart span=10m count(_raw) AS A | appendcols [ index= .... | timechart span=10m count(_raw) AS B] ... View more