![Screen Shot 2016-09-16 at 2.26.13 PM]()
Suppose I have the following two charts on a dashboard. Is it possible to run calculations between the two results? E.g., I'd like to calculate the ratio of absent/sim errors (13) to sim requests (13). For reference, here are my queries: Requests by source _source=access | where url matches "/log*" | parse field=url "reserve.source=& as source | parse field=url "reserve.action=& as action | where action = "start_reserve" | count by source | sort by _count Errors by source _source=access | where url matches "/log*" | parse field=url "reserve.error.code=& as error | where error in ("absent", "0x201033") | parse field=url "reserve.source=& as source | count by source, error | sort by source, _count
Comments
0 comments