Hello,
I'm trying to get this table :
Device ----- Interface ----- March ----- April ----- .....
device1 ----- interface1 ----- LoaddurationM1 ----- LoaddurationA1 ----- .....
device2 ----- interface2 ----- LoaddurationM2 ----- LoaddurationA2 ----- .....
But after running my search I'm getting the table :
Month ----- Device----- Interface----- Load Duration
March----- device1 ----- interface1----- LoaddurationM1
April----- device1 ----- interface1----- LoaddurationA1
April----- device2 ----- interface2----- LoaddurationA2
March----- device2 ----- interface2 ----- LoaddurationM2
I tried the "transpose" command but nothing works.
My search is the next one :
sourcetype=csv Device=*
| eval LD=if(Bits_out_sec>Bandwidth*0.8, Duration, 0)
|stats sum(Duration) AS TotalDuration sum(LD) AS TotalLD BY date_month, Device, Interface
|eval "Load Duration"=round(TotalLD/TotalDuration*100,2)
|table date_month, Device, Interface, "Load Duration"
If you have any idea it would be great.
Thanks a lot,
Romain
... View more