Reporting

How to get sum total of two different rows set value?

tarunsinghtoll
Engager

Hi Team,

I have following data set of two fields recAccuracy and recAccuracyCount. I want to get the sum total of two rows sets as sum total of  "PREMISE_POSSIBLE","STREET_POSSIBLE" and ,"LOCALITY_POSSIBLE"  as cleansed  103343 and another data set as noncleansed for the rest of field values.

 

recAccuracy recAccuracyCount

LOCALITY_POSSIBLE 64507
PREMISE_POSSIBLE 35493
STREET_DEFINITE 46134
PREMISE_PROBABLE 70789
PREMISE_DEFINITE 363709
LOCALITY_PROBABLE 10586
STREET_POSSIBLE 3343
STREET_PROBABLE 12928

 

Result :

noncleansed  cleansed 

103343    504146

 

I want to draw a pie chart of these two fields.

Thanks.

0 Karma
1 Solution

tarunsinghtoll
Engager

I tried some solution as given below:

 

| eval type=if(in(recAccuracy, "PREMISE_POSSIBLE","STREET_POSSIBLE","LOCALITY_POSSIBLE"), "NonCleansed", "Cleansed") | stats sum(recAccuracyCount) as Fields by type

View solution in original post

0 Karma

tarunsinghtoll
Engager

I tried some solution as given below:

 

| eval type=if(in(recAccuracy, "PREMISE_POSSIBLE","STREET_POSSIBLE","LOCALITY_POSSIBLE"), "NonCleansed", "Cleansed") | stats sum(recAccuracyCount) as Fields by type

0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...