Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How to calculate daily values from sum values

$
0
0
Hi, I have values that are a total sum of all data processed. I need to calculate the daily values from the daily sums. Running the following search source=... | timechart span=1d eval(round(latest(USED_SPACE)/1024/1024)) as SpaceTB by Media produces results like A B C D 2015-11-06 70.85 298.18 8.76 2.44 2015-11-07 71.28 298.78 8.78 2.44 2015-11-08 71.34 299.38 8.78 2.44 2015-11-09 71.36 299.43 8.78 2.50 .. I need a table that calculates the amount of data that was processed each day. That means to subtract the current value from the value of the previous day for each day (or other SPAN interval). Results should look like A B C D 2015-11-06 2015-11-07 0.43 0.6 0.02 0 2015-11-08 0.06 0.6 0 0 2015-11-09 0.02 0.05 0 0.06 .. Any suggestions? Thank you

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>