Splunk Search

Stats values to be calculated in 2 ways for a dashboard base query

varsh_6_8_6
Explorer

Hi,
I have 2 panels for which the events flow is high and so I am trying to include the stats command along with the fields command in the base query.
I have a field TotalTransaction for which i need stats values as 
"|stats count(TotalTansaction) as tottrans by Tier" for one panel
"|stats count(TotalTransaction) as tottrans by Tier Proxy method" for the other panel

How to get both the stats values included in the same query.

Labels (1)
0 Karma
1 Solution

ITWhisperer
SplunkTrust
SplunkTrust
|stats count(TotalTransaction) as tottrans by Tier Proxy method
|eventstats sum(tottrans) as totaltrans by Tier

View solution in original post

ITWhisperer
SplunkTrust
SplunkTrust
|stats count(TotalTransaction) as tottrans by Tier Proxy method
|eventstats sum(tottrans) as totaltrans by Tier
Get Updates on the Splunk Community!

New Year, New Changes for Splunk Certifications

As we embrace a new year, we’re making a small but important update to the Splunk Certification ...

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...