Splunk Search
Highlighted

How to add values and count of a field and use them in a stats command?

Path Finder

Hi Splunkers

I need some assistance with a search. I need to add the values of a Field and then use them in a stats command.

The field name is "MyField" and the values and Count are:
Requests 389
Advices 233

I need to add Requests and Advices together and then use them in a stats command as Field "MyFieldTotals"

Thanks in advance

Tags (3)
Highlighted

Re: How to add values and count of a field and use them in a stats command?

Path Finder

HI,

You are looking for something like this:

<Your Search> |eval MyFieldTotals=Requests+Advices | <Your Search>

View solution in original post

Highlighted

Re: How to add values and count of a field and use them in a stats command?

Path Finder

Thanks for the response! It works but now the value returns as RequestsAdvices Can I rename it?

0 Karma
Highlighted

Re: How to add values and count of a field and use them in a stats command?

Path Finder

You can rename using "rename"

|rename as

0 Karma
Highlighted

Re: How to add values and count of a field and use them in a stats command?

Path Finder

That will rename the Field name, not the Value's name.

0 Karma