My event like this:
_time,ProductA,2,"318"
_time,ProductA,5,"318"
_time,ProductA,3,"318"
Extracted fields are:
Time, Product, Qty, Price
I need to sum Qty field as Total for this example 10
Hi
Try
your query..|stats sum(Qty) as Total
Yeah, it get right result. But Price is not if we do the same. Do we need to convert string to numberic?
Its in doble quotes considered as string.