<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Analytics search - ADQL Query to manipulate values from a header using mathematic experessions in Splunk AppDynamics</title>
    <link>https://community.splunk.com/t5/Splunk-AppDynamics/Analytics-search-ADQL-Query-to-manipulate-values-from-a-header/m-p/717650#M595</link>
    <description>&lt;P&gt;&lt;SPAN&gt;Have not heard back from the Client.&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV&gt;will check and get back to you.&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;</description>
    <pubDate>Wed, 24 Oct 2018 15:37:12 GMT</pubDate>
    <dc:creator>CommunityUser</dc:creator>
    <dc:date>2018-10-24T15:37:12Z</dc:date>
    <item>
      <title>Analytics search - ADQL Query to manipulate values from a header using mathematic experessions</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Analytics-search-ADQL-Query-to-manipulate-values-from-a-header/m-p/717648#M593</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;P&gt;we have a Analytics search query for a header &amp;nbsp;that returns the following payload.&lt;/P&gt;

&lt;P&gt;&lt;FONT color="#3366FF"&gt;&lt;STRONG&gt;{"QuoteID":"0409657629","&lt;WBR /&gt;Annual premium":"10115","Line of business":"bop","State":"ND","&lt;WBR /&gt;AgencyCode":"0004045","method"&lt;WBR /&gt;:"getPPC"}&lt;/STRONG&gt;&lt;/FONT&gt;&lt;/P&gt;

&lt;P&gt;&lt;U&gt;&lt;STRONG&gt;my query is&lt;/STRONG&gt;&lt;/U&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;STRONG&gt;&lt;FONT color="#008000"&gt;SELECT segments.httpData.headers.`application-data` AS "application-data", count(*) FROM transactions WHERE segments.httpData.headers.`application-data` = "{\"QuoteID\":\"*\",\"&lt;U&gt;Annual premium&lt;/U&gt;\":\"*\",\"Line of business\":\"bop\",\"State\":\"UT\",\"AgencyCode\":\"*\",\"method\":\"getPPC\"}"&lt;/FONT&gt;&lt;/STRONG&gt;&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;


&lt;P&gt;&lt;SPAN&gt;We are using the above query so that i can get data for each state by changing the value for state with the relevant abrevation. In the example above UT can be changed to MN etc.&lt;/SPAN&gt;&lt;/P&gt;

&lt;P&gt;&lt;SPAN&gt;We are am looking for a way that I can get the "Total Premium" by addidng all the &lt;U&gt;Annual Premium ammounts&lt;/U&gt;.&lt;/SPAN&gt;&lt;/P&gt;

&lt;P&gt;&lt;SPAN&gt;please check attached image which shows the search result.&amp;nbsp;&lt;/SPAN&gt;&lt;/P&gt;

&lt;P&gt;&lt;SPAN&gt;Is there a way we can use mathematical expression on part of the payload data.&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 26 Apr 2018 19:56:52 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Analytics-search-ADQL-Query-to-manipulate-values-from-a-header/m-p/717648#M593</guid>
      <dc:creator>CommunityUser</dc:creator>
      <dc:date>2018-04-26T19:56:52Z</dc:date>
    </item>
    <item>
      <title>Re: Analytics search - ADQL Query to manipulate values from a header using mathematic experessions</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Analytics-search-ADQL-Query-to-manipulate-values-from-a-header/m-p/717649#M594</link>
      <description>&lt;P&gt;Hi Ajay,&lt;/P&gt;

&lt;P&gt;From the screenshot attached, I can see that&amp;nbsp;&lt;U&gt;Annual Premium ammounts&lt;/U&gt;&amp;nbsp;is part of an array of values which I believe is returned from your Data Collector.&lt;/P&gt;

&lt;P&gt;So in this case, first you need to tune your Data Collctor config in a way that you only get the return of&amp;nbsp;&lt;U&gt;Annual Premium ammounts&lt;/U&gt;&lt;SPAN&gt;&amp;nbsp;value and then you can use ADQL SUM function to sum the required values based on matching criteria.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;&lt;A href="https://docs.appdynamics.com/display/PRO44/Analytics+Functions" target="_blank" rel="nofollow noopener noreferrer"&gt;https://docs.appdynamics.com/display/PRO44/Analytics+Functions&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;

&lt;P&gt;&lt;SPAN&gt;Let me know if this helps.&lt;/SPAN&gt;&lt;/P&gt;

&lt;P&gt;&lt;SPAN&gt;Thanks,&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;&lt;SPAN&gt;Deepanshu&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 30 Apr 2018 08:36:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Analytics-search-ADQL-Query-to-manipulate-values-from-a-header/m-p/717649#M594</guid>
      <dc:creator>CommunityUser</dc:creator>
      <dc:date>2018-04-30T08:36:17Z</dc:date>
    </item>
    <item>
      <title>Re: Analytics search - ADQL Query to manipulate values from a header using mathematic experessions</title>
      <link>https://community.splunk.com/t5/Splunk-AppDynamics/Analytics-search-ADQL-Query-to-manipulate-values-from-a-header/m-p/717650#M595</link>
      <description>&lt;P&gt;&lt;SPAN&gt;Have not heard back from the Client.&lt;/SPAN&gt;&lt;/P&gt;
&lt;DIV&gt;will check and get back to you.&lt;/DIV&gt;
&lt;DIV&gt;&amp;nbsp;&lt;/DIV&gt;</description>
      <pubDate>Wed, 24 Oct 2018 15:37:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-AppDynamics/Analytics-search-ADQL-Query-to-manipulate-values-from-a-header/m-p/717650#M595</guid>
      <dc:creator>CommunityUser</dc:creator>
      <dc:date>2018-10-24T15:37:12Z</dc:date>
    </item>
  </channel>
</rss>

