Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to show stats sum for a field using a value produced from an eval statement?

$
0
0
Hi, I have one field with values for each month, and this eval gives me the current month name(current February); eval mnd=strftime(_time, "%B") Field1 is named January, Field2 February... But when I try to sum this field with stats, I get no results; stats sum(mnd) I want this search to automatically show the current month's sum, and not using a static value in the stats sum expression.

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>