<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic SignalFX API to sum metrics in Monitoring Splunk</title>
    <link>https://community.splunk.com/t5/Monitoring-Splunk/SignalFX-API-to-sum-metrics/m-p/556202#M5073</link>
    <description>&lt;P&gt;We are using SignalFX to publish metrics to it and all looks good so far. We have a client that wants to use the SignalFX API itself in order to query timeseries window data to get some data.&lt;BR /&gt;The query that we have written returns the metrics for each HOST (sum per minute). Based on the documentation here (&lt;A href="https://dev.splunk.com/observability/reference/api/retrieve_timeserieswindow/latest" target="_blank" rel="noopener"&gt;https://dev.splunk.com/observability/reference/api/retrieve_timeserieswindow/latest&lt;/A&gt;) i dont see any way of how a sum could be achieved (instead of per host results).&lt;BR /&gt;Theoretically i could just iterate over the object keys and sum up the results, but it would be better if this is returned out of the box.&lt;BR /&gt;Here is the curl command i am using to retrieve the data&lt;BR /&gt;```&lt;BR /&gt;curl --request GET \&lt;BR /&gt;--url '${DOMAIN}/v1/timeserieswindow?startMS=1623943080000&amp;amp;endMS=1623943140000&amp;amp;query=sf_metric%3Ainsert%20AND%20App%3Aservices-cloud%20AND%20Environment%3Abeta&amp;amp;resolution=60000' \&lt;BR /&gt;--header 'X-SF-token: ${TOKEN}'&lt;BR /&gt;```&lt;BR /&gt;The response that i am getting is&lt;BR /&gt;```&lt;BR /&gt;{&lt;BR /&gt;"data": {&lt;BR /&gt;"E4EXtGzAgAA": [&lt;BR /&gt;[&lt;BR /&gt;1623943140000,&lt;BR /&gt;4.0&lt;BR /&gt;]&lt;BR /&gt;],&lt;BR /&gt;"E4E22smAYAA": [&lt;BR /&gt;[&lt;BR /&gt;1623943140000,&lt;BR /&gt;10.0&lt;BR /&gt;]&lt;BR /&gt;]&lt;BR /&gt;},&lt;BR /&gt;"errors": [&lt;BR /&gt;]&lt;BR /&gt;}&lt;BR /&gt;```&lt;BR /&gt;where `E4EXtGzAgAA` and `E4E22smAYAA` are host ID's. I would like to have only the value 14 in the response.&lt;BR /&gt;Any way to achieve this?&lt;BR /&gt;Thanks a lot&lt;/P&gt;</description>
    <pubDate>Thu, 17 Jun 2021 15:59:07 GMT</pubDate>
    <dc:creator>AleksandarT</dc:creator>
    <dc:date>2021-06-17T15:59:07Z</dc:date>
    <item>
      <title>SignalFX API to sum metrics</title>
      <link>https://community.splunk.com/t5/Monitoring-Splunk/SignalFX-API-to-sum-metrics/m-p/556202#M5073</link>
      <description>&lt;P&gt;We are using SignalFX to publish metrics to it and all looks good so far. We have a client that wants to use the SignalFX API itself in order to query timeseries window data to get some data.&lt;BR /&gt;The query that we have written returns the metrics for each HOST (sum per minute). Based on the documentation here (&lt;A href="https://dev.splunk.com/observability/reference/api/retrieve_timeserieswindow/latest" target="_blank" rel="noopener"&gt;https://dev.splunk.com/observability/reference/api/retrieve_timeserieswindow/latest&lt;/A&gt;) i dont see any way of how a sum could be achieved (instead of per host results).&lt;BR /&gt;Theoretically i could just iterate over the object keys and sum up the results, but it would be better if this is returned out of the box.&lt;BR /&gt;Here is the curl command i am using to retrieve the data&lt;BR /&gt;```&lt;BR /&gt;curl --request GET \&lt;BR /&gt;--url '${DOMAIN}/v1/timeserieswindow?startMS=1623943080000&amp;amp;endMS=1623943140000&amp;amp;query=sf_metric%3Ainsert%20AND%20App%3Aservices-cloud%20AND%20Environment%3Abeta&amp;amp;resolution=60000' \&lt;BR /&gt;--header 'X-SF-token: ${TOKEN}'&lt;BR /&gt;```&lt;BR /&gt;The response that i am getting is&lt;BR /&gt;```&lt;BR /&gt;{&lt;BR /&gt;"data": {&lt;BR /&gt;"E4EXtGzAgAA": [&lt;BR /&gt;[&lt;BR /&gt;1623943140000,&lt;BR /&gt;4.0&lt;BR /&gt;]&lt;BR /&gt;],&lt;BR /&gt;"E4E22smAYAA": [&lt;BR /&gt;[&lt;BR /&gt;1623943140000,&lt;BR /&gt;10.0&lt;BR /&gt;]&lt;BR /&gt;]&lt;BR /&gt;},&lt;BR /&gt;"errors": [&lt;BR /&gt;]&lt;BR /&gt;}&lt;BR /&gt;```&lt;BR /&gt;where `E4EXtGzAgAA` and `E4E22smAYAA` are host ID's. I would like to have only the value 14 in the response.&lt;BR /&gt;Any way to achieve this?&lt;BR /&gt;Thanks a lot&lt;/P&gt;</description>
      <pubDate>Thu, 17 Jun 2021 15:59:07 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Monitoring-Splunk/SignalFX-API-to-sum-metrics/m-p/556202#M5073</guid>
      <dc:creator>AleksandarT</dc:creator>
      <dc:date>2021-06-17T15:59:07Z</dc:date>
    </item>
  </channel>
</rss>

