Using the query in step 2 as a starting point, amend the query to scan through Labs/Apache/Access and return the number of redirects. What's the sum of redirects for the last 15 minutes? Round to the nearest thousand.
Hint: This will require adding an additional if expression for redirects:
if(status_code matches "3*", 1, 0) as redirects
AND an additional sum expression in the last line:
sum(redirects) as redirects_cnt
| parse "HTTP/1.1\" * " as redirects
| if(status_code matches "3*", 1, 0) as redirects
| sum(redirects) as redirects_cnt
Please sign in to leave a comment.