This search resulted in a table with columns, browser, failed, success, Failure%
For eg.,
browser failed success Failure%
Chrome 0 2 0
Firefox 2 0 100
IE 0 2 0
IE64 0 2 0
index=... sourcetype=... | rex "(?successful|failed) for the app (?\w+) and browser (?\w+) and region (?\w+)" | where isnotnull(appname) and isnotnull(browser) and region="WEurope" | eval has_failure = if(testResult="failed",1,0) | eval has_success = if(testResult="successful",1,0) | stats sum(has_failure) as failed, sum(has_success) as success by browser | addtotals fieldname=Total | eval Failure%=100*failed/Total | table browser, failed, success, Failure%
What would be the timechart type of query that I have write to get the time on x-axis, and only failure% for each browser on y-axis?
... View more