Data Volume Index - Volume for Each Collector

Comments

2 comments

  • Avatar
    Yoway Buorn

    You can't group a mathematical expression so you need this:

    _index=sumologic_volume _sourceCategory=collector_volume | parse regex "\"(?<collector>(?:[^\"]+)|(?:\"\"))\":{\"sizeInBytes\":(?<bytes>\d+),\"count\":(?<count>\d+)}" multi | bytes/1024/1024/1024 as gbytes | sum(gbytes) as gbytes by collector

    Or some other aggregate operator if that's not the one you want.

    0
    Comment actions Permalink
  • Avatar
    Kevin Sumo

    James,

    I'll make sure the docs are updated.

    0
    Comment actions Permalink

Please sign in to leave a comment.