Knowledge Management

How to set a formula for each column in the summary row

hansot
New Member

If you use table visualization during a dashboard, you can set a summary row at the bottom.
The summary row simply shows the sum or percentage of the corresponding column in the table,
Can you set this to a formula for each column?

For example, if you have a
The summary row for each column of 'sales', 'number of customers', and 'customer price' shows only the sum of the corresponding columns,
The summary line of 'customer price' is 'sales' / 'number of customers' = 7366600/951 = 7746.16 ... .
alt text

Tags (1)
0 Karma
1 Solution

elliotproebstel
Champion

You can achieve this by adding an appendpipe subsearch to the end of your current search:

your base search yielding the table above
| appendpipe 
[ | stats sum(sales) AS sales, stats sum("number of customers") AS "number of customers" 
  | eval "customer price"=sales/'number of customers' ]

View solution in original post

0 Karma

elliotproebstel
Champion

You can achieve this by adding an appendpipe subsearch to the end of your current search:

your base search yielding the table above
| appendpipe 
[ | stats sum(sales) AS sales, stats sum("number of customers") AS "number of customers" 
  | eval "customer price"=sales/'number of customers' ]
0 Karma

hansot
New Member

thank you for your help!
i solved it.

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...