# Statistical problem

**URL:** <https://discuss.elastic.co/t/statistical-problem/82670>\
**Category:** Logstash\
**Created:** [April 18, 2017, 8:43am UTC](https://discuss.elastic.co/t/statistical-problem/82670 "2017-04-18T08:43:26Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sam67000](https://avatars.discourse-cdn.com/v4/letter/s/53a042/32.png) [@Sam67000](https://discuss.elastic.co/u/Sam67000)\
**Post date:** [April 18, 2017, 8:43am UTC](https://discuss.elastic.co/t/statistical-problem/82670/1 "2017-04-18T08:43:26Z")

</div>

Hello EveryOne,

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 18, 2017, 9:05am UTC](https://discuss.elastic.co/t/statistical-problem/82670/2 "2017-04-18T09:05:40Z")

</div>

The typical way of doing this would be to produce events with a field indicate whether the call was successful or not and then use Kibana to compute the success rate in a particular interval.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 18, 2017, 11:13am UTC](https://discuss.elastic.co/t/statistical-problem/82670/4 "2017-04-18T11:13:16Z")

</div>

The events are created by Logstash based on the input configuration you've provided. Once you have events with the text listed above, use a grok or a dissect filter to extract pieces from the line into fields of their own. Please study the configuration examples in the Logstash documentation.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 18, 2017, 11:33am UTC](https://discuss.elastic.co/t/statistical-problem/82670/6 "2017-04-18T11:33:58Z")

</div>

How to best visualize this is more of a Kibana question.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 18, 2017, 12:27pm UTC](https://discuss.elastic.co/t/statistical-problem/82670/8 "2017-04-18T12:27:08Z")

</div>

Send the events to Elasticsearch and use Kibana to visualize them.

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [April 20, 2017, 5:02am UTC](https://discuss.elastic.co/t/statistical-problem/82670/10 "2017-04-20T05:02:09Z")

</div>

For the last time: That's a Kibana question that you can ask in the Kibana group. You will not use Logstash to calculate the percentages.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 18, 2017, 5:06am UTC](https://discuss.elastic.co/t/statistical-problem/82670/11 "2017-05-18T05:06:20Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.