<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: how to sum of count of values of fields? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138087#M184777</link>
    <description>&lt;P&gt;Can you provide more information on how it didn't work? Also, please check the name of fields and apply those in the answer provided here.&lt;/P&gt;</description>
    <pubDate>Wed, 23 Apr 2014 15:02:50 GMT</pubDate>
    <dc:creator>somesoni2</dc:creator>
    <dc:date>2014-04-23T15:02:50Z</dc:date>
    <item>
      <title>how to sum of count of values of fields?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138084#M184774</link>
      <description>&lt;P&gt;Hi,&lt;BR /&gt;
I have a search and output.&lt;BR /&gt;
source="risks_repor.csv"| dedup "Computer Name" | search D- &lt;/P&gt;

&lt;H2&gt;Output:&lt;/H2&gt;

&lt;H2&gt;values                              count      %&lt;/H2&gt;

&lt;P&gt;Cleaned by deletion                   10        19.608% &lt;/P&gt;

&lt;P&gt;Left alone                             6         11.765% &lt;/P&gt;

&lt;P&gt;Deleted                                5        9.804% &lt;/P&gt;

&lt;P&gt;Cleaned                                4         7.843% &lt;/P&gt;

&lt;H1&gt;Question:&lt;/H1&gt;

&lt;P&gt;sum as "Some string"="Cleaned by deletion" + "Left alone"&lt;BR /&gt;
sum1 as "Some string1"="Deleted" + "Cleaned"&lt;/P&gt;

&lt;H1&gt;Expected output:&lt;/H1&gt;

&lt;H1&gt;Some string     Some string1     &lt;/H1&gt;

&lt;P&gt;16                  9&lt;/P&gt;</description>
      <pubDate>Tue, 22 Apr 2014 09:19:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138084#M184774</guid>
      <dc:creator>thambisetty</dc:creator>
      <dc:date>2014-04-22T09:19:04Z</dc:date>
    </item>
    <item>
      <title>Re: how to sum of count of values of fields?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138085#M184775</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;

&lt;BLOCKQUOTE&gt;
&lt;P&gt;&lt;CODE&gt;source="risks_repor.csv".....|table value count |where value="Cleaned" OR value ="Deleted"|stats sum(count) as Somestring1|&lt;BR /&gt;
appendcols[search source="risks_repor.csv".....|table value count|where value="Left alone" OR value ="Cleaned by deletion"|stats sum(count) as Somestring]&lt;/CODE&gt;&lt;/P&gt;
&lt;/BLOCKQUOTE&gt;

&lt;P&gt;I hope this helps..!!!&lt;/P&gt;</description>
      <pubDate>Tue, 22 Apr 2014 12:02:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138085#M184775</guid>
      <dc:creator>harshal_chakran</dc:creator>
      <dc:date>2014-04-22T12:02:17Z</dc:date>
    </item>
    <item>
      <title>Re: how to sum of count of values of fields?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138086#M184776</link>
      <description>&lt;P&gt;this is not working i tried it....&lt;/P&gt;</description>
      <pubDate>Wed, 23 Apr 2014 14:51:05 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138086#M184776</guid>
      <dc:creator>thambisetty</dc:creator>
      <dc:date>2014-04-23T14:51:05Z</dc:date>
    </item>
    <item>
      <title>Re: how to sum of count of values of fields?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138087#M184777</link>
      <description>&lt;P&gt;Can you provide more information on how it didn't work? Also, please check the name of fields and apply those in the answer provided here.&lt;/P&gt;</description>
      <pubDate>Wed, 23 Apr 2014 15:02:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/how-to-sum-of-count-of-values-of-fields/m-p/138087#M184777</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-04-23T15:02:50Z</dc:date>
    </item>
  </channel>
</rss>

