Synopsis
Displays the sum of the values in a specified column in the search query results.
Syntax
sum [column_name]
Required Arguments
column_name
Syntax: <character string>
Description: The name of a column header that has numeric values
Optional Arguments
None
Description
For each event in the search query results that has the specified column_name with a numeric value, add the value to the cumulative sum, and when you have reached the last event, display the sum.
Examples
Example 1:
* in log.access | sum Bytes Sent
Returns the sum of the values in the column Bytes Sent in the events from access log.