Splunk Search

Can you help me generate stats per day?

darioapis
Explorer

I have data like this:

 Time, A, B, C
01.01.2019. 11:00:00, 561, 756, 456
01.01.2019. 11:01:00, 661, 256, 123
01.01.2019. 11:02:00, 261, 456, 123

......

And I would want to combine A's ,B's, C's data in that way that I can plot moving per day. So I want to sum all activity over day per A, B, C and plot it how it moves day per day.

Thanks.

Tags (2)
0 Karma
1 Solution

chrisyounger
SplunkTrust
SplunkTrust

Hi @darioapis

Does this work for you: YOUR_SEARCH | timechart sum(A) sum(B) sum(C)

Hope this helps

View solution in original post

0 Karma

vishaltaneja070
Motivator

@darioapis

In case of unspecified number of columns: Use

<your search> | timechart sum(*)
0 Karma

chrisyounger
SplunkTrust
SplunkTrust

Hi @darioapis

Does this work for you: YOUR_SEARCH | timechart sum(A) sum(B) sum(C)

Hope this helps

0 Karma

darioapis
Explorer

Ok, what if I have unspecified number of columns and I want to do it on all except the _time.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Video | Tom’s Smartness Journey Continues

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...