https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103836#M26851 <P>Try the following search:</P> <P>index=<EM>Your_Index</EM> | stats sum(BytesReceivedPerSec) AS bytes_total</P> Wed, 18 May 2011 10:13:11 GMT Ant1D 2011-05-18T10:13:11Z https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103835#M26850 <P>Hello,</P> <P>How can i sum fields to have the total in a new field ?<BR /> For example, i have a field called (BytesReceivedPerSec) and i would have the sum of this field for all the event (in realtime)</P> <P>I tried accum BytesReceivedPersec AS bytesrcvdtotal but i doesn't do a total sum of all the bytes received.</P> <P>Have you an idea ?</P> <P>Thanks</P> Wed, 18 May 2011 10:08:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103835#M26850 aymericbrun 2011-05-18T10:08:32Z https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103836#M26851 <P>Try the following search:</P> <P>index=<EM>Your_Index</EM> | stats sum(BytesReceivedPerSec) AS bytes_total</P> Wed, 18 May 2011 10:13:11 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103836#M26851 Ant1D 2011-05-18T10:13:11Z https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103837#M26852 <P>Thank you very much <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> <P>It works perfectly</P> <P>my search exactly :</P> <P>host=hp-dev index="main"| stats sum(BytesReceivedPersec) AS octets_recus sum(BytesSentPersec) AS octets_envoyes | eval octets_recus_Mo=octets_recus / 1000000 | eval octets_envoyes_Mo=octets_envoyes / 1000000</P> Mon, 28 Sep 2020 09:34:36 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103837#M26852 aymericbrun 2020-09-28T09:34:36Z https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103838#M26853 <P>Glad to help <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 18 May 2011 13:14:27 GMT https://community.splunk.com/t5/Splunk-Search/How-to-sum-two-fields/m-p/103838#M26853 Ant1D 2011-05-18T13:14:27Z