<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: traffic overview in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-calculate-traffic-overview/m-p/642490#M109495</link>
    <description>&lt;P&gt;Assuming bytes is field containing one or more numerics, the search looks like it will work. How you tried it? Do you get an error?&lt;/P&gt;</description>
    <pubDate>Sun, 07 May 2023 07:22:37 GMT</pubDate>
    <dc:creator>ITWhisperer</dc:creator>
    <dc:date>2023-05-07T07:22:37Z</dc:date>
    <item>
      <title>How to calculate traffic overview?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-calculate-traffic-overview/m-p/642489#M109494</link>
      <description>&lt;P&gt;I want to calculate the volume of traffic ( FortiGate firewall) ;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I wrote this query I don't know if it's correct or not.&lt;/P&gt;
&lt;P&gt;&lt;FONT color="#000000"&gt;"index=&amp;lt;my index&amp;gt; sourcetype=&amp;lt;my_sourcetype&amp;gt;&amp;nbsp; | eval TotalTraffic_GB = (sum(bytes)/1000000000)| stats sum(TotalTraffic_GB) as TotalGigaBytes , &lt;/FONT&gt;&lt;BR /&gt;&lt;FONT color="#000000"&gt;avg(TotalTraffic_GB) as AvgGigaBytes, max(TotalTraffic_GB) as MaxGigaBytes"&lt;/FONT&gt;&lt;/P&gt;
&lt;P&gt;&lt;FONT color="#000000"&gt;PLEASE CAN ANY ONE HELP ME ??&amp;nbsp;&lt;/FONT&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 08 May 2023 10:06:09 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-calculate-traffic-overview/m-p/642489#M109494</guid>
      <dc:creator>RJ2</dc:creator>
      <dc:date>2023-05-08T10:06:09Z</dc:date>
    </item>
    <item>
      <title>Re: traffic overview</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-calculate-traffic-overview/m-p/642490#M109495</link>
      <description>&lt;P&gt;Assuming bytes is field containing one or more numerics, the search looks like it will work. How you tried it? Do you get an error?&lt;/P&gt;</description>
      <pubDate>Sun, 07 May 2023 07:22:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-calculate-traffic-overview/m-p/642490#M109495</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-05-07T07:22:37Z</dc:date>
    </item>
    <item>
      <title>Re: traffic overview</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-calculate-traffic-overview/m-p/642491#M109496</link>
      <description>&lt;P&gt;It works well ! without any error&lt;/P&gt;</description>
      <pubDate>Sun, 07 May 2023 07:24:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-calculate-traffic-overview/m-p/642491#M109496</guid>
      <dc:creator>RJ2</dc:creator>
      <dc:date>2023-05-07T07:24:02Z</dc:date>
    </item>
  </channel>
</rss>

