Splunk Search

How to calculate row sum which each column has different weight?

New Member

Hi

I have a table as below.

severity S0 S1 S2 S3
event A 1 0 0 0
event B 0 2 0 0
event C 0 1 1 0

each column has different weight. for example S0 = 1,000,000, S1 = 10,000, S2 = 100, S3 = 1. i want to sort the event based on the weight multiply by the event number.
Please advise.

Tags (3)
0 Karma
1 Solution

Motivator

try this:

| eval weight=(S01000000 + S110000 + S2100 + S31)
| sort 0 - weight

View solution in original post

Motivator

try this:

| eval weight=(S01000000 + S110000 + S2100 + S31)
| sort 0 - weight

View solution in original post

New Member

thank you sir.

0 Karma