Sum of a multivalue field inside a row
Hi below is how my processed data look like
And the expected output is to have aggregated values of Field A, field B, field C and Total,
the expected output looks like below :
@varunCarbyne
Try
YOUR_SEARCH | stats sum("field A") as "field A", sum("field B") as "field B",sum("field C") as "field C",sum(Total) as Total, Values(IP) as IP by User | table User IP "field A" "field B" "field C" Total
@varunCarbyne
Try
YOUR_SEARCH | stats sum("field A") as "field A", sum("field B") as "field B",sum("field C") as "field C",sum(Total) as Total, Values(IP) as IP by User | table User IP "field A" "field B" "field C" Total
Come on, @kamlesh_vaghela , if you're going to answer correctly, make it an answer!
Thanks, @DalJeanis 🙂
Converted to Answer.
Hi varunCarbyne,
could you share your search?
Bye.
Giuseppe
I have tried eventstats(FieldA) by User, But its now working
@vnravikumar @harishalipaka