I have a report like this :
keyword "one" "two" "three"
mumbai 5 3 2
kolkata 2 2 1
chennai 0 6 4
I want my output like this :
keyword sum "one" "two" "three"
mumbai 10 5 3 2
kolkata 5 2 2 1
chennai 10 0 6 4
sum is the field which is the summation of each row
Please help
Thanks in advance,
Abhay
Have a look at the addtotals
command.
http://docs.splunk.com/Documentation/Splunk/5.0/SearchReference/Addtotals
The docs provide examples. It's as easy as adding | addtotals
at the end of your search. What is it you don't understand?
Hi,
Can you please show me one example to use that.
Please, it is a kind request