topic Re: Find out request count per node vs total request count in DQL

Find out request count per node vs total request count

susmita_k — Wed, 05 Aug 2026 22:14:15 GMT

Hi,

I need to set up an alert when the distribution of a particular request is not even across the different nodes. To do that, I need to find out the percentage of load based on the load/per node vs total load. I am trying to achieve it by this DQL, however the sum is not working. Any help is really appreciated.

fetch spans, from: now()-1h
| filter service.name == "service-name"
| summarize requests = count(), by: {host.name}
| fieldsAdd total = sum(requests)
| fieldsAdd pct = round(toDouble(requests) / toDouble(total) * 100, 2)
| sort requests desc

Re: Find out request count per node vs total request count

sujit_k_singh — Wed, 05 Aug 2026 23:26:53 GMT

Hi @susmita_k

Try this

fetch spans, from: now()-1h
| filter service.name == "easytrade-ld-offerservice"
| summarize requests = count(), by: {host.name}
| summarize { total = sum(requests), d = collectArray(record(host.name, requests)) }
| expand d
| fieldsAdd host.name = d[host.name], requests = d[requests]
| fieldsAdd pct = concat(toString(round(toDouble(requests) / toDouble(total) * 100)), "%")
| fields host.name, requests, total, pct
| sort requests desc

Re: Find out request count per node vs total request count

susmita_k — Fri, 07 Aug 2026 13:02:27 GMT

Thank you @sujit_k_singh . this works.

Re: Find out request count per node vs total request count

susmita_k — Fri, 07 Aug 2026 13:06:29 GMT

@sujit_k_singh can I make it a timeseries if I want to set up an alert in anomaly detection?