Splunk Search

adding up of two rows

harsh1734
New Member

hi,

when i run a following command it

index="New" "Phase * ended" | table phase_0_ended,phase-1-ended,datetime

it gives following output

phase_0_ended phase_1_ended datetime
1120 secs 1150 secs 12 jan 12:33:42
1148 secs 1130 secs 12 jan 12:36:51 secs

now i want to make another column which can add up phase_0_ended and phase_1_ended value of 1 row means(1120+1150) sec to give the result..

Tags (2)
0 Karma

Ayn
Legend
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...