Timechart: How to sum up all earlier values?

[f_d]

Hi, I want to create a timechart that shows the sum of all ealier values from another timechart.

As an example, I have a timechart as a base, like index=foo | timechart sum(field1). At t1 it has value 42, at t2 0 and at t3 -5.
The new timechart with the sum of all earlier values should show at t1 and t2 the value 42 and at t3 37.

How can that be achieved?

[sundareshr · Accepted solution]

Try this

 index=foo | timechart sum(field1) as sum_fld1 | accum sum_fld1

[f_d]

Thanks. This works exactly as needed!