How can I make a "SELECT SUM(column) in splunk?
Question
I want to make a select sum(value) to get only something like
gender value
Femenino 18500
Masculino 11000
from this Statistics.
This is my search
" source=users| JOIN type=inner id [ SEARCH source=bills | rename id_user AS id ] | top gender "
1 answers
solution1
0 ACCPTED 2016-01-04 22:25:06
尝试将以下内容添加到查询中：
| stats sum(value) as value by gender
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.
Related Question
How can I connect my splunk using Splunk SDK Java?
Splunk - How do I make a clickable hyperlink
How do I take an hourly sum of one field value in splunk
How to make an Alert in Splunk?
How do I multiply a column with different values element wise in splunk
How can I create a Splunk App dynamically by Splunk Java or C# SDK
How to make a Splunk Dashboard dynamic?
how to make a dashboard and query in splunk
How can I send the content of the file to HTTP Event Collector in Splunk?
Splunk : How to sum the values of the fields that are a result of if condition
Related Tags