<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to add a row with statistics for the last week? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-add-a-row-with-statistics-for-the-last-week/m-p/650256#M224796</link>
    <description>&lt;P&gt;Hey guys!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I need the statistics of a bunch of data by month. And this is done already.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;search&lt;BR /&gt;|eval Month=strftime(_time,"%Y %m") | stats count(mydata) AS nobs, mean(mydata) as mean, min(mydata) as min by Month | reverse&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;The output is what I want:&lt;/P&gt;&lt;TABLE border="0" width="348" cellspacing="0" cellpadding="0"&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD width="87" height="21"&gt;Month&lt;/TD&gt;&lt;TD width="87"&gt;nobs&lt;/TD&gt;&lt;TD width="87"&gt;mean&lt;/TD&gt;&lt;TD width="87"&gt;min&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 06&lt;/TD&gt;&lt;TD&gt;1900&lt;/TD&gt;&lt;TD&gt;-5.0239778&lt;/TD&gt;&lt;TD&gt;-68.73417&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 05&lt;/TD&gt;&lt;TD&gt;3562&lt;/TD&gt;&lt;TD&gt;-4.2430259&lt;/TD&gt;&lt;TD&gt;-67.134697&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 04&lt;/TD&gt;&lt;TD&gt;3181&lt;/TD&gt;&lt;TD&gt;-4.1811658&lt;/TD&gt;&lt;TD&gt;-64.995394&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 03&lt;/TD&gt;&lt;TD&gt;4274&lt;/TD&gt;&lt;TD&gt;-4.3373071&lt;/TD&gt;&lt;TD&gt;-134.20177&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 02&lt;/TD&gt;&lt;TD&gt;3939&lt;/TD&gt;&lt;TD&gt;-4.7725011&lt;/TD&gt;&lt;TD&gt;-73.538274&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 01&lt;/TD&gt;&lt;TD&gt;2868&lt;/TD&gt;&lt;TD&gt;-5.5231115&lt;/TD&gt;&lt;TD&gt;-41.056093&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2022 12&lt;/TD&gt;&lt;TD&gt;395&lt;/TD&gt;&lt;TD&gt;-4.617424&lt;/TD&gt;&lt;TD&gt;-35.51642&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Now I need add another row on the very top with statistics for the most recent WEEK. Ideally, I can use the search result without the need to search again and degrade performance. Thanks!&lt;/P&gt;</description>
    <pubDate>Wed, 12 Jul 2023 17:36:16 GMT</pubDate>
    <dc:creator>qqzj</dc:creator>
    <dc:date>2023-07-12T17:36:16Z</dc:date>
    <item>
      <title>How to add a row with statistics for the last week?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-add-a-row-with-statistics-for-the-last-week/m-p/650256#M224796</link>
      <description>&lt;P&gt;Hey guys!&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I need the statistics of a bunch of data by month. And this is done already.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;search&lt;BR /&gt;|eval Month=strftime(_time,"%Y %m") | stats count(mydata) AS nobs, mean(mydata) as mean, min(mydata) as min by Month | reverse&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;The output is what I want:&lt;/P&gt;&lt;TABLE border="0" width="348" cellspacing="0" cellpadding="0"&gt;&lt;TBODY&gt;&lt;TR&gt;&lt;TD width="87" height="21"&gt;Month&lt;/TD&gt;&lt;TD width="87"&gt;nobs&lt;/TD&gt;&lt;TD width="87"&gt;mean&lt;/TD&gt;&lt;TD width="87"&gt;min&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 06&lt;/TD&gt;&lt;TD&gt;1900&lt;/TD&gt;&lt;TD&gt;-5.0239778&lt;/TD&gt;&lt;TD&gt;-68.73417&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 05&lt;/TD&gt;&lt;TD&gt;3562&lt;/TD&gt;&lt;TD&gt;-4.2430259&lt;/TD&gt;&lt;TD&gt;-67.134697&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 04&lt;/TD&gt;&lt;TD&gt;3181&lt;/TD&gt;&lt;TD&gt;-4.1811658&lt;/TD&gt;&lt;TD&gt;-64.995394&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 03&lt;/TD&gt;&lt;TD&gt;4274&lt;/TD&gt;&lt;TD&gt;-4.3373071&lt;/TD&gt;&lt;TD&gt;-134.20177&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 02&lt;/TD&gt;&lt;TD&gt;3939&lt;/TD&gt;&lt;TD&gt;-4.7725011&lt;/TD&gt;&lt;TD&gt;-73.538274&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2023 01&lt;/TD&gt;&lt;TD&gt;2868&lt;/TD&gt;&lt;TD&gt;-5.5231115&lt;/TD&gt;&lt;TD&gt;-41.056093&lt;/TD&gt;&lt;/TR&gt;&lt;TR&gt;&lt;TD height="21"&gt;2022 12&lt;/TD&gt;&lt;TD&gt;395&lt;/TD&gt;&lt;TD&gt;-4.617424&lt;/TD&gt;&lt;TD&gt;-35.51642&lt;/TD&gt;&lt;/TR&gt;&lt;/TBODY&gt;&lt;/TABLE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Now I need add another row on the very top with statistics for the most recent WEEK. Ideally, I can use the search result without the need to search again and degrade performance. Thanks!&lt;/P&gt;</description>
      <pubDate>Wed, 12 Jul 2023 17:36:16 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-add-a-row-with-statistics-for-the-last-week/m-p/650256#M224796</guid>
      <dc:creator>qqzj</dc:creator>
      <dc:date>2023-07-12T17:36:16Z</dc:date>
    </item>
    <item>
      <title>Re: How to add a row with statistics for the last week?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-add-a-row-with-statistics-for-the-last-week/m-p/650262#M224799</link>
      <description>&lt;P&gt;Maybe last week is the wrong way to specify it. I should have written "the previous 7 days". Thanks!&lt;/P&gt;</description>
      <pubDate>Wed, 12 Jul 2023 18:12:54 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-add-a-row-with-statistics-for-the-last-week/m-p/650262#M224799</guid>
      <dc:creator>qqzj</dc:creator>
      <dc:date>2023-07-12T18:12:54Z</dc:date>
    </item>
  </channel>
</rss>

