Splunk Search

how to calculate sum of two fields using eval command?

Madhan45
Path Finder

I have column A and B, its values are

A- 5,10,15,20
B-1,2,3,4

i need the Total in third field which should contain their addition like below:
Total-6,12,18,24.

how can i use eval command for that.??

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Are A and B multi-value fields?

---
If this reply helps you, Karma would be appreciated.
0 Karma

woodcock
Esteemed Legend

Like this:

... | eval Total = A + B

Madhan45
Path Finder

for sub,mul,div "A-B", "A*B","A/B" is it so?

0 Karma

woodcock
Esteemed Legend

Exactly, provided that both A and B are single-valued files; is either multi-valued?. Don't forget to click "Accept".

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...