issue in sum chart and addcoltotals

[ND]

Hi All,

I want to show sum of field by year(2019, 2020, 2021)

i am using query:

|inputlookup abc.csv | eval _time=strptime('date1',"%Y-%m-%d")| eval year= strftime(_time,"%Y")  | chart sum(com) as com by field1, year| addcoltotals

o/p:

field1 com 2019 2020 2021 

for this total for 2020 is correct but facing issue for 2019 & 2021

please help me to get correct solution for this.

Thank,

ND

[PickleRick · Accepted solution]

What "issue" are you facing? Are the rows incorrectly associated with proper years? Is the sum incorrectly counted?

Oh, and instead of strptime and strftime, you could just do

| eval year=substr(date1,1,4)

[ND]

yes ,the sum incorrectly counted, for  year 2019 and 202. but sum for 2020 is correctly counted.

the data is correctly associated 

| eval year=substr(date1,1,4) thanks will update this.