topic How do I generate a search that shows me the total REVENUE generated per by week? in Splunk Search

How do I generate a search that shows me the total REVENUE generated per by week?

makhombi — Tue, 29 Sep 2020 22:15:46 GMT

Hi Guys,

I'm a new Splunk user: I have a dataset with fields Date, ACC_NBR, Count, REVENUE. Date (Date when number was billed), Field ACC_NBR(Cellphone Number), Count(counts the number of times the number was billed)REVENUE(The amount deducted). I want to generate a search which shows me the total REVENUE generated per by week.

Date, ACC_NBR, Count, REVENUE
01/08/2017,72100979,1,5
01/08/2017,72101041,1,0.7
02/08/2017,75331219,1,0.7
02/08/2017,75331419,1,5
02/08/2017,75332059,1,0.7

Re: How do I generate a search that shows me the total REVENUE generated per by week?

dkeck — Tue, 04 Dec 2018 13:01:41 GMT

HI,

try index=<your_index> earliest=@w0| stats sum(REVENUE) by ACC_NBR

earliest=@w0 = beginning of the week

or use earliest=-7d@d for 7 days, depending on what "a week" is for you

Re: How do I generate a search that shows me the total REVENUE generated per by week?

martin_mueller — Tue, 04 Dec 2018 19:49:48 GMT

Assuming you have timestamp extraction done right, use timechart span=w sum(REVENUE).

Re: How do I generate a search that shows me the total REVENUE generated per by week?

makhombi — Thu, 06 Dec 2018 12:45:53 GMT

This is a follow-up question to my first. The following query worked for me. I managed to get the total revenue generated per ACC_NBR.

The 2nd part of the question: How to show the total revenue generated per week.

| stats sum(REVENUE) by ACC_NBR