Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Create a new field with cumulative count of a unique ID

$
0
0
IS there a way I can create a new field with a cumulative count of a unique ID? For example, currently i have created a transaction which groups events together as "trips", however I would like to give each trip a number. below is an example of what I am trying to acheive: initially after using the transaction, the events will look like below. Each transaction event will have a unique vehicle ID, duration of trip and distance travelled. vehID,Duration,Distance 1,30,40 1,20,30 2,30,40 3,20,30 3,40,50 3,50,60 I would like to add a cumulative count to act as a Trip Number. vehID,Duration,Distance,tripNo 1,30,40,1 1,20,30,2 2,30,40,1 3,20,30,1 3,40,50,2 3,50,60,3 Could anyone advise how I could achieve the above? Thanks!

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>