topic Re: Sum the values in a field in Splunk Search

Sum the values in a field

Madhusri — Fri, 27 Aug 2021 10:10:36 GMT

Hi Team,

Current table

Expected

Application	Failure	Success
D	11	21

How to add the Applications values and make it as new application. Also need to sum all the failures and success values.

Can anyone help on this?

Regards,

Madhu R

scelikok — Fri, 27 Aug 2021 10:49:47 GMT

Can you try below?

| stats sum(Failure) as Failure sum(Success) as Success | eval Application="D" | table Application Failure Success

Madhusri — Fri, 27 Aug 2021 10:56:31 GMT

Updated

Current table

Expected

Need to combine A,B,C as D and in the table E Application also needed

Regards,

Madhusri R

scelikok — Fri, 27 Aug 2021 11:04:49 GMT

It is clear now 🙂 Please try below;