topic Sum session value from several servers? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Sum-session-value-from-several-servers/m-p/55863#M13645 <P>Hi all,<BR /> I've been trying hard for two days now, but doesn't seem to find how to query to get the following graph:</P> <P>I have three servers. All three have a performance counter called "Active SMTP Sessions" which returns the following field <BR /> "Active SMTP Sessions" = 23</P> <P>I'd like a graph that shows the total amount of SMTP sessions, a sum of the same performance counter from all three servers.</P> <P>I've managed to do a timechart showing the three values by host followed by the addtotal, and that's nice.<BR /> But I really only want the Total on my chart, not all thre servers plus total.</P> <P>Any ideas?</P> Sun, 22 Jan 2012 00:30:39 GMT mibo 2012-01-22T00:30:39Z Sum session value from several servers? https://community.splunk.com/t5/Splunk-Search/Sum-session-value-from-several-servers/m-p/55863#M13645 <P>Hi all,<BR /> I've been trying hard for two days now, but doesn't seem to find how to query to get the following graph:</P> <P>I have three servers. All three have a performance counter called "Active SMTP Sessions" which returns the following field <BR /> "Active SMTP Sessions" = 23</P> <P>I'd like a graph that shows the total amount of SMTP sessions, a sum of the same performance counter from all three servers.</P> <P>I've managed to do a timechart showing the three values by host followed by the addtotal, and that's nice.<BR /> But I really only want the Total on my chart, not all thre servers plus total.</P> <P>Any ideas?</P> Sun, 22 Jan 2012 00:30:39 GMT https://community.splunk.com/t5/Splunk-Search/Sum-session-value-from-several-servers/m-p/55863#M13645 mibo 2012-01-22T00:30:39Z Re: Sum session value from several servers? https://community.splunk.com/t5/Splunk-Search/Sum-session-value-from-several-servers/m-p/55864#M13646 <P>This doesn't do the trick?</P> <P><CODE> ... | timechart sum(active_SMTP_sessions) AS "Total active SMTP sessions"</CODE></P> Mon, 28 Sep 2020 10:21:00 GMT https://community.splunk.com/t5/Splunk-Search/Sum-session-value-from-several-servers/m-p/55864#M13646 hexx 2020-09-28T10:21:00Z