topic Re: How to get sum of all columns into a new column? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428586#M122606 <P>@paullt12345 ,</P> <P>Just add <CODE>|addtotals fieldname=sum</CODE> to your search and you get a new sum field</P> <P><A href="https://docs.splunk.com/Documentation/SplunkCloud/7.2.4/SearchReference/Addtotals">https://docs.splunk.com/Documentation/SplunkCloud/7.2.4/SearchReference/Addtotals</A></P> Tue, 12 Mar 2019 04:06:18 GMT renjith_nair 2019-03-12T04:06:18Z How to get sum of all columns into a new column? https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428584#M122604 <P>Hi</P> <P>I need to do a sum of all columns into new column</P> <PRE><CODE>EVNT COL1 COL2 COL3 SUM 1 22 22 22 66 2 1 0 0 1 </CODE></PRE> <P>-paull</P> Tue, 12 Mar 2019 03:29:03 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428584#M122604 paullt12345 2019-03-12T03:29:03Z Re: How to get sum of all columns into a new column? https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428585#M122605 <P>Hi</P> <P>You can try</P> <PRE><CODE>| makeresults | eval EVNT=1,COL1=22,COL2=22,COL3=22,SUM=0 | foreach COL* [ eval SUM = SUM+&lt;&lt;FIELD&gt;&gt;] | table EVNT,COL1,COL2,COL3,SUM </CODE></PRE> Tue, 12 Mar 2019 04:05:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428585#M122605 vnravikumar 2019-03-12T04:05:33Z Re: How to get sum of all columns into a new column? https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428586#M122606 <P>@paullt12345 ,</P> <P>Just add <CODE>|addtotals fieldname=sum</CODE> to your search and you get a new sum field</P> <P><A href="https://docs.splunk.com/Documentation/SplunkCloud/7.2.4/SearchReference/Addtotals">https://docs.splunk.com/Documentation/SplunkCloud/7.2.4/SearchReference/Addtotals</A></P> Tue, 12 Mar 2019 04:06:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428586#M122606 renjith_nair 2019-03-12T04:06:18Z Re: How to get sum of all columns into a new column? https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428587#M122607 <P>Thanks... </P> Tue, 12 Mar 2019 04:19:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428587#M122607 paullt12345 2019-03-12T04:19:27Z Re: How to get sum of all columns into a new column? https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428588#M122608 <P>Thanks it also works as expected.</P> Tue, 12 Mar 2019 04:19:57 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/428588#M122608 paullt12345 2019-03-12T04:19:57Z Re: How to get sum of all columns into a new column? https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/679081#M232147 <P>5 years later and I came upon this. This should be the actual, concise answer for OP's question.</P> Thu, 29 Feb 2024 01:40:04 GMT https://community.splunk.com/t5/Splunk-Search/How-to-get-sum-of-all-columns-into-a-new-column/m-p/679081#M232147 ClubMed 2024-02-29T01:40:04Z