Write Operations in Kibana

Elastic Stack Kibana
#1 
Hello people!!!

please how could i write this Splunk function in kibana

sum(NetTargetConnectCount) as SumNetTargetConnectCount
sum(NetTargetReconnectCount) as SumNetTargetReconnectCount
sum(NetTargetRetransmitCount) as SumNetTargetRetransmitCount
sum(NetTargetSendCount) as SumNetTargetSendCount

           count(Application_NetworkConnectFailure) as SumApplicationNetworkConnectFailureCount
           filter NetTargetProtocols is TCP
           $SearchFilter$
     ]
     | eval ConnectAvailability = 100 - round ((SumApplicationNetworkConnectFailureCount + SumNetTargetReconnectCount) / (SumApplicationNetworkConnectFailureCount + SumNetTargetConnectCount) * 100, 3)

NetworkAvailability = round ((ConnectAvailability + TransmitAvailability) / 2, 2)

Thank you in advance

#2

Hello,

hopefully someone with better SPL knowledge can weight in, but something like this in SQL might work:

    SELECT
    sum(NetTargetConnectCount) as SumNetTargetConnectCount,
    sum(NetTargetReconnectCount) as SumNetTargetReconnectCount,
    sum(NetTargetRetransmitCount) as SumNetTargetRetransmitCount,
    sum(NetTargetSendCount) as SumNetTargetSendCount,
    count(Application_NetworkConnectFailure) as SumApplicationNetworkConnectFailureCount
    FROM myIndex
    WHERE NetTargetProtocols = 'TCP'
    | math "100 - round ((SumApplicationNetworkConnectFailureCount + SumNetTargetReconnectCount) / (SumApplicationNetworkConnectFailureCount + SumNetTargetConnectCount) * 100, 3)"
#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.