I'm trying to produce a single value for a dashboard. I want to chart the rate between two different count_distinct results for a single query. But Sumo Logic doesn't seem to allow math operations upon aggregate operation results.
| parse store_id ...
| parse order_id ...
| count_distinct(order_id) as total_orders, count_distinct(store_id) as total_stores
// this doesn't work
// | (total_orders / total_stores) as avg_orders_per_store
Things I've tried:
1. I tried save and lookup, but I think those would only work as a single combined search.
2. So then I tried a subquery, after finding this article - but that's not working.
3. I also found this post, with no responses to it.
Hoping a new post will garner some attention and help. Thank you very much!
Please sign in to leave a comment.