Dashboards & Visualizations

How sum row cell based on type?

aahmad
Loves-to-Learn Everything

Hey,

I am trying to sum values based on type. I have a column of numbers and multivalues. I want to sum all the multivalues together and display the sum of all multivalues. How can I achieve this? Please refer to the diagram below:

aahmad_0-1652370935056.png

As you can see there are two column. One column displays the numbers and the other column displays the type of each cell. I want to get the sum of cell that have a multivalue type.

Labels (5)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Not clear whether you wanted the grand total for all numbers and the grand total for all multivalues or just the total for each event

| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
| eventstats sum(number) as grandtotal by type
0 Karma

aahmad
Loves-to-Learn Everything

Sorry for not clarifying. I want the total of each event. Forexample cell A has values, {2,5,6,7}. I want the total of the values in that cell. So the answer would be 20. Does that make sense?

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Persistent Queue at TcpOut — One of Splunk's Most Practical Features

Splunk introduced persistent queueing at the tcpout layer as one of the most practical resilience features in ...

Catalog Is Now Generally Available on Splunk Cloud Platform

A Unified View of Your Data  Security logs, application events, business data, and historical telemetry often ...

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner

Your Path to AgenticOps: AI Experiences for Every Splunk Practitioner   Watch on demand us for a demo-driven ...