Hi Team, I am trying to fetch the count and percentage of hosts having success and failures along with failure percentage. host = Server1 Server2 Server3 Server4 Server5 But if count of spcecific host is having no event, I want to show that as well even with result =0. I am running below query but it is missing some servers because there are no events on specific sevrers form last 2 hours. index=server_list host IN (Server1,Server2,Server3,Server4,Server5) events_status = "*" | eval pass=if(like(event_status,"20%"),1,0) | eval fail=if(!like(event_status,"20%"),1,0) | stats count as Overall_Volume,sum(pass) as Passed, sum(fail) as Failed by host | eval Failure_Rate=round(Failed_Requests/(Passed_Requests+Failed_Requests)*100,2) | fillnull value=0 Below result I am getting, because Server4 and Server5 dont have any traffic from last 2 Hours - host Overall_Volume Passed Failed Failure_Rate Server1 2 1 1 50 Server2 10 6 4 40 Server3 1 0 1 100 Can anyone help in query so that I should get all Servers with values as 0 if no traffic.
... View more