Dashboards & Visualizations

How sum row cell based on type?

aahmad
Loves-to-Learn Everything

Hey,

I am trying to sum values based on type. I have a column of numbers and multivalues. I want to sum all the multivalues together and display the sum of all multivalues. How can I achieve this? Please refer to the diagram below:

aahmad_0-1652370935056.png

As you can see there are two column. One column displays the numbers and the other column displays the type of each cell. I want to get the sum of cell that have a multivalue type.

Labels (5)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Not clear whether you wanted the grand total for all numbers and the grand total for all multivalues or just the total for each event

| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
| eventstats sum(number) as grandtotal by type
0 Karma

aahmad
Loves-to-Learn Everything

Sorry for not clarifying. I want the total of each event. Forexample cell A has values, {2,5,6,7}. I want the total of the values in that cell. So the answer would be 20. Does that make sense?

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
0 Karma
Get Updates on the Splunk Community!

Fueling your curiosity with new Splunk ILT and eLearning courses

At Splunk Education, we’re driven by curiosity—both ours and yours! That’s why we’re committed to delivering ...

Splunk AI Assistant for SPL 1.1.0 | Now Personalized to Your Environment for Greater ...

Splunk AI Assistant for SPL has transformed how users interact with Splunk, making it easier than ever to ...

Unleash Unified Security and Observability with Splunk Cloud Platform

     Now Available on Microsoft AzureOn Demand Now Step boldly into the AI revolution with enhanced security ...