I have an infra agent installed and logging enabled and I would like to run some NRQL to get the ‘% of response codes’ from the message. Is this possible?
The format of the messages is as follows:-
#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
I want to report on sc-status so ‘% of 200 response’ etc and create a dashboard.
I have tried ‘SELECT count(*) FROM Log where application = ‘----’ FACET status’ but status is not recognised.