Dashboards & Visualizations

How sum row cell based on type?

aahmad
Loves-to-Learn Everything

Hey,

I am trying to sum values based on type. I have a column of numbers and multivalues. I want to sum all the multivalues together and display the sum of all multivalues. How can I achieve this? Please refer to the diagram below:

aahmad_0-1652370935056.png

As you can see there are two column. One column displays the numbers and the other column displays the type of each cell. I want to get the sum of cell that have a multivalue type.

Labels (5)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Not clear whether you wanted the grand total for all numbers and the grand total for all multivalues or just the total for each event

| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
| eventstats sum(number) as grandtotal by type
0 Karma

aahmad
Loves-to-Learn Everything

Sorry for not clarifying. I want the total of each event. Forexample cell A has values, {2,5,6,7}. I want the total of the values in that cell. So the answer would be 20. Does that make sense?

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
0 Karma
Get Updates on the Splunk Community!

Developer Spotlight with Brett Adams

In our third Spotlight feature, we're excited to shine a light on Brett—a Splunk consultant, innovative ...

Index This | What can you do to make 55,555 equal 500?

April 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Say goodbye to manually analyzing phishing and malware threats with Splunk Attack ...

In today’s evolving threat landscape, we understand you’re constantly bombarded with phishing and malware ...