https://community.splunk.com/t5/Getting-Data-In/How-to-divide-yesterdays-data-with-today-s-data/m-p/575240#M101674 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp; Appreciate your help sir.</P><P>I have added the below line for getting the exact result.</P><P>| eval result = fileSizeBytes-PerviousFileSizeBytes . Which stores the result in result filed.&nbsp;</P> Wed, 17 Nov 2021 10:03:36 GMT yesh_9 2021-11-17T10:03:36Z https://community.splunk.com/t5/Getting-Data-In/How-to-divide-yesterdays-data-with-today-s-data/m-p/575032#M101633 <P>Hello Folks ,</P><P>Need help. Every day new file generates with a FileSizeBytes value, I need to compare the yesterday's FileSizeBytes value with today's FileSizeBytes value. and store the result value on a new field.</P><P>Ex:&nbsp; &nbsp; &nbsp; _time&nbsp; &nbsp;&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;FileSizeBytes&nbsp;</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-11-13 02:21:51.327&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;116786105</P><P>&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;2021-11-12 02:15:18.357&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; 116757352</P><P>Job runs from Tue- Sat</P> Tue, 16 Nov 2021 12:39:40 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-divide-yesterdays-data-with-today-s-data/m-p/575032#M101633 yesh_9 2021-11-16T12:39:40Z https://community.splunk.com/t5/Getting-Data-In/How-to-divide-yesterdays-data-with-today-s-data/m-p/575034#M101634 <LI-CODE lang="markup">| sort 0 _time | streamstats values(FileSizeBytes) as previousFileSizeBytes current=f window=1</LI-CODE> Tue, 16 Nov 2021 12:47:51 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-divide-yesterdays-data-with-today-s-data/m-p/575034#M101634 ITWhisperer 2021-11-16T12:47:51Z https://community.splunk.com/t5/Getting-Data-In/How-to-divide-yesterdays-data-with-today-s-data/m-p/575240#M101674 <P><a href="https://community.splunk.com/t5/user/viewprofilepage/user-id/225168">@ITWhisperer</a>&nbsp; Appreciate your help sir.</P><P>I have added the below line for getting the exact result.</P><P>| eval result = fileSizeBytes-PerviousFileSizeBytes . Which stores the result in result filed.&nbsp;</P> Wed, 17 Nov 2021 10:03:36 GMT https://community.splunk.com/t5/Getting-Data-In/How-to-divide-yesterdays-data-with-today-s-data/m-p/575240#M101674 yesh_9 2021-11-17T10:03:36Z