I have 2 columns. One of them lists IP address of which many are repeating and the other column is of purchases. The same IP has multiple purchases so I can see multiple entries. Can I club into one total purchase for a particular IP?
Thanks!
I dont' have field names, but it should be some variant of ...
... my search here | stats sum(purchases) AS TotalPurchased by IPAddress
Give that a shot, let us know how it works for you!
Happy Splunking,
Rich
I dont' have field names, but it should be some variant of ...
... my search here | stats sum(purchases) AS TotalPurchased by IPAddress
Give that a shot, let us know how it works for you!
Happy Splunking,
Rich