Follow

Keep Up to Date with the Most Important News

By pressing the Subscribe button, you confirm that you have read and are agreeing to our Privacy Policy and Terms of Use
Contact

Splunk – Add numeric columns and display only that result

This is my Splunk query:

| stats count by Successful_Unsuccessful 

This is what the result looks like: enter image description here

What I want to do is total all the numeric values in the count column and display it as a Single Value Visualization in a dashboard panel

MEDevel.com: Open-source for Healthcare and Education

Collecting and validating open-source software for healthcare, education, enterprise, development, medical imaging, medical records, and digital pathology.

Visit Medevel

I tried doing this which sort of works but doesn’t fulfill my requirement:

| stats count by Successful_Unsuccessful 
| addcoltotals labelfield=Successful_Unsuccessful label="Grand Totals" count

This does add all the numeric values and gives me the total but I want the Grand Total to be the only value that appears so that I can use it in a Single Value Visualization in a Dashboard Panel

Issue in picture: enter image description here

>Solution :

For a single-value visualization, all you need is the total count.

| stats count
Add a comment

Leave a Reply

Keep Up to Date with the Most Important News

By pressing the Subscribe button, you confirm that you have read and are agreeing to our Privacy Policy and Terms of Use

Discover more from Dev solutions

Subscribe now to keep reading and get access to the full archive.

Continue reading