I've got a log string that says "finished their work" or "failed their work." and a parseable subfield containing the person's name.
I trying to calculate the success percentage given a name (i.e. if "Joe finished their work" 9 times but failed 1 time, and Jim finished 7 but failed 3 times, I need a view that shows "Joe: 90%", "Jim: 70%")
Here's what I have tried:
("finished their work" or "failed their work")
| parse regex "(?<status>finished|failed) their work"
| json field=_raw "arg0.details.person.name" as name
| concat(name, "-", status) as nameAndStatus
| count as taskTotal by task
| count as numerator by nameAndStatus
Obviously this doesn't work because of the dual count-condition, but I'd like to then do numerator divided by taskTotal for each task to view the output.
Please sign in to leave a comment.