How to get sum of all the results

[dpdwibedy]

Hi All,

I'm using a query to get the total total count of  a filed ( different error messages ) .
Here is the search and stats being displayed:

index=sp_dev  "ProductHandler" | rex field=message "operation\\\":\\\"(?<ErrorMessage>[A-Za-z]+)\\\""| stats count by ErrorMessage

ErrorMessage Count

ProductNotFound         10

DuplicateProduct          36

InvalidProductCode     18

I want  the total number of  these 3 error messages   as  TotalErrors.

Thanks,

DD

[isoutamo]

Hi

Add the next line to end of your query

| addcoltotals labelfield=ErrorMessage Count

r. Ismo

[dpdwibedy]

@isoutamo  : I am seeing same result as mine.

I want  only one column with count.

TotalError     

40

[isoutamo · Accepted solution]

Then the best option is add to the end (w/o addcoltotals)

| stats sum(Count) as TotalError

r. Ismo

[dpdwibedy]

Thanks! . That worked.