无法在相扑逻辑中按数字划分字段

Question

我有一个 sumo 逻辑查询，我在其中获取一个数字字段并对其求和，但该字段的值是毫秒，所以我想将该字段除以 1000 以获得以秒为单位的数字。

parse "DownloadDuration=*," as DownloadTime | sum(downloadtime / 1000) as TotalDownloadTime

但是 sumologic 给了我一个错误：Parse error: ')' expected but '/' found. 当我尝试这样做时（即使他们 help docs seem to suggest this is totally legit.

Answer 1

我必须添加另一个 parse 语句来更改字段值。

parse "DownloadDuration=*," as DownloadTime | 
(downloadtime / 1000) as DownloadTime | 
sum(downloadtime) as TotalDownloadTime

完美运行！