Splunk Enterprise

help on total sum

jip31
Motivator

hi

how to do a total of these 3 fields please?

| stats count(hang_process_name) as "h", count(crash_process_name) as "c", count(web_app_duration_avg_ms) as "w" by name

I tried [ eval Total=(h+c+w) but it doesnt works

thanks

Tags (1)
0 Karma
1 Solution

thambisetty
SplunkTrust
SplunkTrust
| stats count(hang_process_name) as "h", count(crash_process_name) as "c", count(web_app_duration_avg_ms) as "w" by name
| fillnull h,c,w
| eval Total = h+c+w
————————————
If this helps, give a like below.

View solution in original post

0 Karma

thambisetty
SplunkTrust
SplunkTrust
| stats count(hang_process_name) as "h", count(crash_process_name) as "c", count(web_app_duration_avg_ms) as "w" by name
| fillnull h,c,w
| eval Total = h+c+w
————————————
If this helps, give a like below.
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...