Hey all,
I'm trying to set up a transaction to track uptime vs downtime for our locations. In one field I have either true or false for each hour. I'm looking to get total time for each 'group' of events. . I would like to be able to have each 'group' (could last from several hours, to a week or more) of false readings to be it's own transaction. Over the course of a month or more, we could have many groups of false for each site, so I'd like to be able to see how long each incident kept it down for and how often it goes down over time.
Is this possible to do with transaction? Or would I be better off using a different command for this type of thing?
Here's what I'm using right now (prereg would mean that location is down):
*| eval hourly_status=if(prereg_on>prereg_off, "true","false") | transaction fields=hourly_status | eval human_duration=(duration)/86400
... View more