Hi Team,
Current table
Application | Failure | Success |
A | 2 | 6 |
B | 4 | 7 |
C | 5 | 8 |
Expected
Application | Failure | Success |
D | 11 | 21 |
How to add the Applications values and make it as new application. Also need to sum all the failures and success values.
Can anyone help on this?
Regards,
Madhu R
Hi @Madhusri,
It is clear now 🙂 Please try below;
| appendpipe
[ search Application IN (A,B,C)
| stats sum(Failure) as Failure sum(Success) as Success
| eval Application="D"]
| search NOT Application IN (A,B,C)
| sort Application
Hi @Madhusri,
It is clear now 🙂 Please try below;
| appendpipe
[ search Application IN (A,B,C)
| stats sum(Failure) as Failure sum(Success) as Success
| eval Application="D"]
| search NOT Application IN (A,B,C)
| sort Application
Hi @Madhusri,
Can you try below?
| stats sum(Failure) as Failure sum(Success) as Success
| eval Application="D"
| table Application Failure Success
Updated
Current table
Application | Failure | Success |
A | 2 | 6 |
B | 4 | 7 |
C | 5 | 8 |
E | 5 | 8 |
Expected
Application | Failure | Success |
D | 11 | 21 |
E | 5 | 8 |
Need to combine A,B,C as D and in the table E Application also needed
Regards,
Madhusri R