I have a set of time series data that looks like this:
Date Type Data
==================
12 A 1
12 B 2
12 C 3
13 A 1
13 B 2
13 C 3
I need to insert for example 2 calculated fields based on a formula for example, D = A + B - C, E = A + B + C and insert back the date. The results should look like the following:
Date Type Data
==================
12 A 1
12 B 2
12 C 3
12 D 1+2-3
12 E 1+2+3
13 A 4
13 B 5
13 C 6
13 D 4+5-6
12 E 4+5+6
Is Splunk able to achieve this?
↧