impact
Class: sugar · Streaming: accumulating
Contribution percentage per group.
Signature
| impact [agg] by=<field_list>
Positional Arguments
| Name | Type | Required | Description |
|---|---|---|---|
agg | agg_list | No | default count() |
Options
| Name | Type | Default | Description |
|---|---|---|---|
by | field_list | - | - |
Desugars To
stats <agg> as v by <keys> | eventstats sum(v) as total_v | extend pct_v = v / total_v | sort -pct_v
Examples
impact sum(bytes) by host
Generated from the LynxFlow registry. See RFC-002 for the full language specification.