Dashboards & Visualizations

How sum row cell based on type?

aahmad
Loves-to-Learn Everything

Hey,

I am trying to sum values based on type. I have a column of numbers and multivalues. I want to sum all the multivalues together and display the sum of all multivalues. How can I achieve this? Please refer to the diagram below:

aahmad_0-1652370935056.png

As you can see there are two column. One column displays the numbers and the other column displays the type of each cell. I want to get the sum of cell that have a multivalue type.

Labels (5)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Not clear whether you wanted the grand total for all numbers and the grand total for all multivalues or just the total for each event

| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
| eventstats sum(number) as grandtotal by type
0 Karma

aahmad
Loves-to-Learn Everything

Sorry for not clarifying. I want the total of each event. Forexample cell A has values, {2,5,6,7}. I want the total of the values in that cell. So the answer would be 20. Does that make sense?

Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust
| streamstats count as row 
| stats sum(number) as total values(type) as type values(number) as number by row
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI!Discover how Splunk’s agentic AI ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

Watch On Demand the Tech Talk, and empower your SOC to reach new heights! Duration: 1 hour  Prepare to ...

Splunk Observability as Code: From Zero to Dashboard

For the details on what Self-Service Observability and Observability as Code is, we have some awesome content ...