How to have an additional row on the top which basically adds up the sum of below rows of the table
The consuming_app value as "ALL" and the remaining fileds as the sum of below rows.
Try like this
your current search producing table with consuming_app count and other fields
| appendpipe [| stats sum(*) as * | eval consuming_app="1. ALL" ]
| sort consuming_app | eval consuming_app=if(consuming_app="1. ALL","ALL",consuming_app)
Try like this
your current search producing table with consuming_app count and other fields
| appendpipe [| stats sum(*) as * | eval consuming_app="1. ALL" ]
| sort consuming_app | eval consuming_app=if(consuming_app="1. ALL","ALL",consuming_app)
Thanks Much ..Perfectly worked