Hi Team Splunk!
How can i do this?
Thanks!
| table src_ip dest_ip megabyte | addcoltotals megabyte labelfield=total(megabytes) label="src_ip"
thank you!
but result is not i want
You can use 'addcoltotals' to display a total for your megabyte column. Add this to the end of your search | addcoltotals labelfield=dest_ip label= "total(megabyte)" megabyte
It won't display like you're showing with a merged cell though.
thank you!
but result is not i want