Hello
I need to timechart sum of selles over month period.
how to do this?
I am new in splunk.
without knowing any of your data, the timechart command looks like this:
|timechart span=1mon sum(selles) as selles
there is really great documentation on splunk to learn all of the commands and all of the options
http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/Timechart
http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/CommonEvalFunctions
http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/CommonStatsFunctions
http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/ListOfSearchCommands
Thank you for reply.
But this solution does not work for me.
I need to summarize values only on the month period , but not to accumulate values between periods.
Is it possible for you to give some sample data and expected output?