Create a new row to the table which is the sum of existing rows

[amargovindan]

How to have an additional row on the top which basically adds up the sum of below rows of the table
The consuming_app value as "ALL" and the remaining fileds as the sum of below rows.

[somesoni2 · Accepted solution]

Try like this

your current search producing table with consuming_app count and other fields
| appendpipe [| stats sum(*) as * | eval consuming_app="1. ALL" ] 
| sort consuming_app | eval consuming_app=if(consuming_app="1. ALL","ALL",consuming_app)

[amargovindan]

Thanks Much ..Perfectly worked