topic Re: Can you help me generate stats per day? in Splunk Search

Can you help me generate stats per day?

darioapis — Wed, 06 Feb 2019 06:55:39 GMT

I have data like this:

 Time, A, B, C
01.01.2019. 11:00:00, 561, 756, 456
01.01.2019. 11:01:00, 661, 256, 123
01.01.2019. 11:02:00, 261, 456, 123

......

And I would want to combine A's ,B's, C's data in that way that I can plot moving per day. So I want to sum all activity over day per A, B, C and plot it how it moves day per day.

Thanks.

Re: Can you help me generate stats per day?

chrisyounger — Wed, 06 Feb 2019 07:00:08 GMT

Hi @darioapis

Does this work for you: YOUR_SEARCH | timechart sum(A) sum(B) sum(C)

Hope this helps

Re: Can you help me generate stats per day?

darioapis — Wed, 06 Feb 2019 07:03:12 GMT

Ok, what if I have unspecified number of columns and I want to do it on all except the _time.

Re: Can you help me generate stats per day?

vishaltaneja070 — Wed, 06 Feb 2019 07:15:57 GMT

@darioapis

In case of unspecified number of columns: Use

<your search> | timechart sum(*)