I am using above splunk query stats count by BankType.
I am getting result as
SBI 27
AXIS 15
CITI 12.
but I want to sum the count of Axis and citi and display it under AXIS column. so basically output would be something like this
SBI 27
AXIS 27.
Can anyone suggest what can we do here ?
| eval BankType=if(BankType=="CITI", "AXIS", BankType)
| stats count by BankType
| eval BankType=if(BankType=="CITI", "AXIS", BankType)
| stats count by BankType