How to get the Total difference amount from DP - RF
Search used:
index=elm-*** | dedup transactionid | eval amount=round(amount/100,2) | stats sum(amount) as Total by actioncode
actioncode Total
DP 19460.63
RF 595.14
↧