Hello All, I am trying to get a total number of bytes/MB/GB uploaded per application in Splunk. Can't seem to find the correct search, I did find file_size. Here is the search that I started out with; sourcetype=x index=x_method="Explicit Proxy" | table app,category,activity, user | dedup user | stats count by app, Gives me the number of users per app, need to number of bytes uploaded per app. Then this search, not sure if the totals are correct or not. sourcetype=x index=y access_method="Explicit Proxy" activity=upload | stats sum(file_size) by app Thanks!
... View more