Splunk Search
Highlighted

How to get Total Sum of Error Type Counts per day?

Explorer

I'm trying to add a column to the right of OTHER, which sums up the entire row counts of each errorType per day. So for example, the first value in a column farthest to the right would be the total count for apierror + approved + declined + expiredCard etc. for each day.

My current search is gateway=firstdata errorType!=null event=transactionCompleted | timechart count by errorType span="1m"

alt text

0 Karma
Highlighted

Re: How to get Total Sum of Error Type Counts per day?

SplunkTrust
SplunkTrust

Look at the addtotals command.

My current search is gateway=firstdata errorType!=null event=transactionCompleted | timechart count by errorType span="1m" | addtotals 

http://docs.splunk.com/Documentation/Splunk/6.3.3/SearchReference/Addtotals