Splunk Search

"mstats" Across Multiple Indexes

Explorer

Hello Everyone,

I have metrics in different metric indexes but I want to perform a timechart count on these, adding all of them into a single count each day.

I can make a timechart count of them separately, but I want to make a timechart count, where the count in each minute, hour, day, etc., is the sum of each of the counts separately.

Can you please help me perform this query?

Thank you!

0 Karma