Groups in stats command: How to get the sum of multiple fields by a field?

[splunkuser320]

I am trying to create a query to get the sum of multiple fields by a field. 

index="*****"
|stats sum(field_A) as  A by field_C,sum(field_B) as B  by field_C

| table field_C, field_A,field_B

This query is giving error. 

[splunkuser320]

Thanks for quick help 

[gcusello · Accepted solution]

Hi @splunkuser320,

you cannot use two BY clauses in a stats command, please try this:

index="*****"
| stats sum(field_A) AS field_A sum(field_B) AS field_B BY field_C

Ciao.

Giuseppe