When running a single search on bandwidth data I can calculate the percentage between bandwidth In and Out using this eval fucntion:
| eval percent_difference=((BandwidthIn/BandwidthOut)*100) | table percent_difference _time
What I want to do is calculate the percentage change between bandwidth over a 5/minute time span. For example, lets assume I'm seeing 100/mbps of bandwidth at 12:00p Noon and at 12:05p the bandwidth jumps to 125/mbps. How can I calculate the 25% increase in bandwidth between those two timespans/searches?