Conditional Operator

Follow

Yuvaraj M

• May 05, 2020 09:23

Unable to Proceed with the Practice session in Sumologic in Conditional Oprator: 

Using the query in step 2 as a starting point, amend the query to scan through Labs/Apache/Access and return the number of redirects. What's the sum of redirects for the last 15 minutes? Round to the nearest thousand. 

Hint: This will require adding an additional if expression for redirects:

if(status_code matches "3*", 1, 0) as redirects

AND an additional sum expression in the last line:

sum(redirects) as redirects_cnt 

 

I tried with the below solution, but it failed 

_sourceCategory=Labs/Apache/Access
| parse  "HTTP/1.1\" * " as status_code
| if(status_code matches "4*", 1, 0) as client_err
| if(status_code matches "5*", 1, 0) as server_err 
| if(status_code matches "3*", 1, 0) as redirects 
| sum(server_err) as server_errors_cnt, sum(client_err) as client_errors_cnt, sum(redirects) as redirects_errors_cnt

0

• 

  Rick Jury

  • May 14, 2020 21:36

  Hi , 

  what was the error message when you say this failed. I tried your query on the Sumo Logic training environment and it worked fine for me.

   

  0

  Comment actions Permalink
• 

  Varun Jagadeesh

  • May 19, 2020 18:55

  Hi Rick Jury
  
  This is the error we are getting while trying with the same code in the self-placed course.

   

  

  0

  Comment actions Permalink

Please sign in to leave a comment.