Get the result of split two values into alert or another value

[cperzrt10 (Cristian)]

I have data with 2 variables, one is the total number of http response code and another is only the total of http response code with the value of "200".

the structure is the result of transform the result is like this

"hits": [
      {
        "_index": "transformation_1",
        "_id": "TY8VM6b388qsv-n3X6st77IAAAAAAAAA",
        "_score": 1,
        "_source": {
          "agent": "Madrid",
          "@timestamp": {
            "max": "2024-01-23T10:50:30.633Z"
          },
          "httpResponseCode200": 547941,
          "httpResponseCodeTotal": 550235
        }
      },.....

I want to calculate de httpResponseCode200/httpResponseCodeTotal of into enrich processor to create another variable.

How can I do it?

[jsanz (Jorge Sanz)]

You can create an ingest pipeline that computes that value on any new record written to the transform index using a script processor.

The transforms UI allows you to set up a pipeline so you can probably create it and set it up.