Splunk Search

Can you help me with the following search in Splunk?

vumanhtai
Path Finder

Hi Team Splunk!
alt text

How can i do this?

Thanks!

0 Karma

nagarjuna280
Communicator

| table src_ip dest_ip megabyte | addcoltotals megabyte labelfield=total(megabytes) label="src_ip"

0 Karma

vumanhtai
Path Finder

thank you!
but result is not i want

0 Karma

dflodstrom
Builder

You can use 'addcoltotals' to display a total for your megabyte column. Add this to the end of your search | addcoltotals labelfield=dest_ip label= "total(megabyte)" megabyte It won't display like you're showing with a merged cell though.

0 Karma

vumanhtai
Path Finder

thank you!
but result is not i want

0 Karma
Get Updates on the Splunk Community!

Technical Workshop Series: Splunk Data Management and SPL2 | Register here!

Hey, Splunk Community! Ready to take your data management skills to the next level? Join us for a 3-part ...

Spotting Financial Fraud in the Haystack: A Guide to Behavioral Analytics with Splunk

In today's digital financial ecosystem, security teams face an unprecedented challenge. The sheer volume of ...

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability

Solve Problems Faster with New, Smarter AI and Integrations in Splunk Observability As businesses scale ...