Synopsis
Displays the sum of the values in a specified column in the search query results.
Syntax
sum [column_name]
Required Arguments
column_name
Syntax: <character string>
Description: The name of a column header that has numeric values
Optional Arguments
None
Description
For each event in the search query results that has the specified column_name with a numeric value, adds the value to the cumulative sum, and when it reaches the last event, displays the sum.
Examples
Example 1:
* in log.access | sum Bytes Sent
Returns the sum of the values in the column Bytes Sent from the events in access log.