Dashboards & Visualizations

How sum row cell based on type?

aahmad
Loves-to-Learn Everything

Hey,

I am trying to sum values based on type. I have a column of numbers and multivalues. I want to sum all the multivalues together and display the sum of all multivalues. How can I achieve this? Please refer to the diagram below:

aahmad_0-1652370935056.png

As you can see there are two column. One column displays the numbers and the other column displays the type of each cell. I want to get the sum of cell that have a multivalue type.

Labels (5)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Not clear whether you wanted the grand total for all numbers and the grand total for all multivalues or just the total for each event

| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
| eventstats sum(number) as grandtotal by type
0 Karma

aahmad
Loves-to-Learn Everything

Sorry for not clarifying. I want the total of each event. Forexample cell A has values, {2,5,6,7}. I want the total of the values in that cell. So the answer would be 20. Does that make sense?

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
0 Karma
Get Updates on the Splunk Community!

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Video | Tom’s Smartness Journey Continues

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...