topic How to generate a search that displays column totals per day for each email address? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-search-that-displays-column-totals-per-day-for/m-p/268042#M80633 <P>How do I get daily totals (column) for a list of e-mail addresses (column) for registration failures?</P> <PRE><CODE>E-mail Address Day1 Day2 Day3 Day4 Day5 Day6 Day7 Total-Failures-for-individual Address1 2 4 6 Address2 1 5 6 Address3 3 3 4 10 Total Daily 6 9 3 0 0 4 0 </CODE></PRE> Wed, 07 Dec 2016 21:23:30 GMT rholm01 2016-12-07T21:23:30Z How to generate a search that displays column totals per day for each email address? https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-search-that-displays-column-totals-per-day-for/m-p/268042#M80633 <P>How do I get daily totals (column) for a list of e-mail addresses (column) for registration failures?</P> <PRE><CODE>E-mail Address Day1 Day2 Day3 Day4 Day5 Day6 Day7 Total-Failures-for-individual Address1 2 4 6 Address2 1 5 6 Address3 3 3 4 10 Total Daily 6 9 3 0 0 4 0 </CODE></PRE> Wed, 07 Dec 2016 21:23:30 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-search-that-displays-column-totals-per-day-for/m-p/268042#M80633 rholm01 2016-12-07T21:23:30Z Re: How to generate a search that displays column totals per day for each email address? https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-search-that-displays-column-totals-per-day-for/m-p/268043#M80634 <P>Try this</P> <PRE><CODE>base search | eval day=round(relative_time(now(), "@d")-relative_time(,_time, "@d"), 0)/86400 | eval day="Day ".day | chart count over email_id by day | addtotals | addcoltotals labelfield=email_id label="Total Daily" </CODE></PRE> Wed, 07 Dec 2016 21:49:11 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-search-that-displays-column-totals-per-day-for/m-p/268043#M80634 sundareshr 2016-12-07T21:49:11Z Re: How to generate a search that displays column totals per day for each email address? https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-search-that-displays-column-totals-per-day-for/m-p/268044#M80635 <P>Is there a way to have this without the values in the columns above the totals? <BR /> <IMG src="https://screenshot.click/20-05-lk4n9-4u0mx.jpg" alt="alt" />,Awesome! Is there a way to remove the values in the columns and just have the totals? <BR /> <IMG src="https://screenshot.click/20-05-lk4n9-4u0mx.jpg" alt="alt" /></P> Wed, 20 Sep 2017 14:10:12 GMT https://community.splunk.com/t5/Splunk-Search/How-to-generate-a-search-that-displays-column-totals-per-day-for/m-p/268044#M80635 replicamask 2017-09-20T14:10:12Z