Splunk Search

Extracting fields from logs

kandulasrinivas
New Member

I have a log file with below content

20120316.051652 Fr I perf Thread-9807784[10.xx.xx.x]/xxxxxx xxxxxxx xxxxxxx 725 100 787234600 2107768832

20120316.051652 Fr I perf Thread-9807750[10.xx.xx.x]/xxxxxxx xxxxxxx xxxxxxx 921 100 790443496 2107768832

How can i add the values that are present in 9 th column of line example in the above line
i want to add 725 + 921 and print the sum of it.

Tags (2)
0 Karma

Ayn
Legend
... | rex "^(?:\S+\s){7}(?<myfield>\d+)" | accum myfield AS myfield_sum
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...