Splunk Enterprise

how to sum different fields

jip31
Motivator

hi

 

what I have to do for doing a total sum of the 3 fields?

Thanks

 

| stats count(toto) as 1, count(tutu) as 2 count(titi) as 3 by site

 

 

Labels (1)
Tags (1)
0 Karma
1 Solution

PickleRick
SplunkTrust
SplunkTrust

Either I don't understand your requirement or there's nothing easier than

| stats count(c1) as s1 count(c2) as s2 count(c3) as s3 by site
| eval t=s1+s2+s3

View solution in original post

0 Karma

PickleRick
SplunkTrust
SplunkTrust

Either I don't understand your requirement or there's nothing easier than

| stats count(c1) as s1 count(c2) as s2 count(c3) as s3 by site
| eval t=s1+s2+s3
0 Karma

jip31
Motivator

oh of course..., thanks

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.0.2 Availability: On cloud and On-premise!

A few months ago, we released Splunk Enterprise Security 8.0 for our cloud customers. Today, we are excited to ...

Logs to Metrics

Logs and Metrics Logs are generally unstructured text or structured events emitted by applications and written ...

Developer Spotlight with Paul Stout

Welcome to our very first developer spotlight release series where we'll feature some awesome Splunk ...