# Write Operations in Kibana

**URL:** <https://discuss.elastic.co/t/write-operations-in-kibana/262574>\
**Category:** Kibana\
**Created:** [January 28, 2021, 10:23pm UTC](https://discuss.elastic.co/t/write-operations-in-kibana/262574 "2021-01-28T22:23:13Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![ITchandj](https://avatars.discourse-cdn.com/v4/letter/i/f19dbf/32.png) [@ITchandj](https://discuss.elastic.co/u/ITchandj)\
**Post date:** [January 28, 2021, 10:23pm UTC](https://discuss.elastic.co/t/write-operations-in-kibana/262574/1 "2021-01-28T22:23:14Z")

</div>

```
Hello people!!!

```

please how could i write this Splunk function in kibana

sum(NetTargetConnectCount) as SumNetTargetConnectCount  
sum(NetTargetReconnectCount) as SumNetTargetReconnectCount  
sum(NetTargetRetransmitCount) as SumNetTargetRetransmitCount  
sum(NetTargetSendCount) as SumNetTargetSendCount

```
           count(Application_NetworkConnectFailure) as SumApplicationNetworkConnectFailureCount
           filter NetTargetProtocols is TCP
           $SearchFilter$
     ]
     | eval ConnectAvailability = 100 - round ((SumApplicationNetworkConnectFailureCount + SumNetTargetReconnectCount) / (SumApplicationNetworkConnectFailureCount + SumNetTargetConnectCount) * 100, 3)

```

NetworkAvailability = round ((ConnectAvailability + TransmitAvailability) / 2, 2)

Thank you in advance

---

<div class="post-metadata">

**Author:** ![ppisljar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ppisljar/32/11588_2.png) [@ppisljar](https://discuss.elastic.co/u/ppisljar)\
**Post date:** [February 1, 2021, 7:05am UTC](https://discuss.elastic.co/t/write-operations-in-kibana/262574/2 "2021-02-01T07:05:12Z")

</div>

Hello,

hopefully someone with better SPL knowledge can weight in, but something like this in SQL might work:

```auto
    SELECT
    sum(NetTargetConnectCount) as SumNetTargetConnectCount,
    sum(NetTargetReconnectCount) as SumNetTargetReconnectCount,
    sum(NetTargetRetransmitCount) as SumNetTargetRetransmitCount,
    sum(NetTargetSendCount) as SumNetTargetSendCount,
    count(Application_NetworkConnectFailure) as SumApplicationNetworkConnectFailureCount
    FROM myIndex
    WHERE NetTargetProtocols = 'TCP'
    | math "100 - round ((SumApplicationNetworkConnectFailureCount + SumNetTargetReconnectCount) / (SumApplicationNetworkConnectFailureCount + SumNetTargetConnectCount) * 100, 3)"

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 1, 2021, 7:06am UTC](https://discuss.elastic.co/t/write-operations-in-kibana/262574/3 "2021-03-01T07:06:02Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.