It works as I expected.
[1] Can you explain me about this rex. How does email="" string goes to Anonymous and email=äbcd.gmail.com goes to customer?
[2] How can I get avg customer from this ?
... View more
I have below format of data. I would like to count email with empty string as anonymous and email with any string as customer and would like to draw a chart for the same.
email= ,status='yes'
email=abced@gmail.com ,status='yes'
email=ced@gmail.com ,status='yes'
... View more
I am new to splunka and have a question on charting percentage field that is derived from search/query result.
Splunk indexed logs:
2013-10-11 17:46:22,539 INFO [com.xxx.yyy] score=891 url_id=200
I would like to chart a % of urls whose score < 100.
I use below query to get list of score count.
host="abc" AND com.xxx.yyy "score" | chart count by score
How can I calculate a percentage of score <100 using splunk?
... View more