Splunk Search

Sum in timechart

shravanikarale
Loves-to-Learn Lots

I want to display earliest invested amount based on type (stock,fd,mutual fund,etc) over a month and want to keep number as unique. 

invested amount number

amountnumbertypedate
1001Stock2/12/2020
5010Stock7/5/2020
2002Stock4/15/2020
3003Mutual Fund3/13/2020
4004Fix deposit3/14/2020
3005Mutual Fund4/01/2020
2006Stock4/15/5050
6607Mutual Fund5/1/2020
10008Fix deposit5/10/2020
8009Mutual Fund6/20/2020

I want the output as sum based on per month by asset_type. 
example: stock = 300 for feb month

have tries timechart but no results found is displaying. 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk MCP & Agentic AI: Machine Data Without Limits

  Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization ...

Finding Based Detections General Availability

Overview  We’ve come a long way, folks, but here in Enterprise Security 8.4 I’m happy to announce Finding ...

Get Your Hands Dirty (and Your Shoes Comfy): The Splunk Experience

Hands-On Learning and Technical Seminars  Sometimes, you just need to see the code. For those looking for a ...