Splunk Search

Extracting fields from logs

kandulasrinivas
New Member

I have a log file with below content

20120316.051652 Fr I perf Thread-9807784[10.xx.xx.x]/xxxxxx xxxxxxx xxxxxxx 725 100 787234600 2107768832

20120316.051652 Fr I perf Thread-9807750[10.xx.xx.x]/xxxxxxx xxxxxxx xxxxxxx 921 100 790443496 2107768832

How can i add the values that are present in 9 th column of line example in the above line
i want to add 725 + 921 and print the sum of it.

Tags (2)
0 Karma

Ayn
Legend
... | rex "^(?:\S+\s){7}(?<myfield>\d+)" | accum myfield AS myfield_sum
0 Karma
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

[Puzzles] Solve, Learn, Repeat: Unmerging HTML Tables

[Puzzles] Solve, Learn, Repeat: Unmerging HTML TablesFor a previous puzzle, I needed some sample data, and ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...