Splunk Search

How to add values and count of a field and use them in a stats command?

denisevw
Path Finder

Hi Splunkers

I need some assistance with a search. I need to add the values of a Field and then use them in a stats command.

The field name is "MyField" and the values and Count are:
Requests 389
Advices 233

I need to add Requests and Advices together and then use them in a stats command as Field "MyFieldTotals"

Thanks in advance

Tags (3)
1 Solution

ankireddy007
Path Finder

HI,

You are looking for something like this:

<Your Search> |eval MyFieldTotals=Requests+Advices | <Your Search>

View solution in original post

ankireddy007
Path Finder

HI,

You are looking for something like this:

<Your Search> |eval MyFieldTotals=Requests+Advices | <Your Search>

denisevw
Path Finder

That will rename the Field name, not the Value's name.

0 Karma

ankireddy007
Path Finder

You can rename using "rename"

|rename as

0 Karma

denisevw
Path Finder

Thanks for the response! It works but now the value returns as RequestsAdvices Can I rename it?

0 Karma
Get Updates on the Splunk Community!

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...

4 Ways the Splunk Community Helps You Prepare for .conf25

.conf25 is right around the corner, and whether you’re a first-time attendee or a seasoned Splunker, the ...