Splunk Enterprise

help on total sum

jip31
Motivator

hi

how to do a total of these 3 fields please?

| stats count(hang_process_name) as "h", count(crash_process_name) as "c", count(web_app_duration_avg_ms) as "w" by name

I tried [ eval Total=(h+c+w) but it doesnt works

thanks

Labels (1)
Tags (1)
0 Karma
1 Solution

thambisetty
SplunkTrust
SplunkTrust
| stats count(hang_process_name) as "h", count(crash_process_name) as "c", count(web_app_duration_avg_ms) as "w" by name
| fillnull h,c,w
| eval Total = h+c+w
————————————
If this helps, give a like below.

View solution in original post

0 Karma

thambisetty
SplunkTrust
SplunkTrust
| stats count(hang_process_name) as "h", count(crash_process_name) as "c", count(web_app_duration_avg_ms) as "w" by name
| fillnull h,c,w
| eval Total = h+c+w
————————————
If this helps, give a like below.
0 Karma
Get Updates on the Splunk Community!

Video | Welcome Back to Smartness, Pedro

Remember Splunk Community member, Pedro Borges? If you tuned into Episode 2 of our Smartness interview series, ...

Detector Best Practices: Static Thresholds

Introduction In observability monitoring, static thresholds are used to monitor fixed, known values within ...

Expert Tips from Splunk Education, Observability in Action, Plus More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...