Summarizing Total by Columns


1 comment

  • Avatar
    Shobhit Garg

    Hi Chris,

    I do not think you can achieve this. With transpose I am afraid we can achieve it.

    You can alternatively try below. We can use accum. Please read more about accum here 


    | timeslice 1d
    | formatDate(_timeslice,"MM-dd-yyyy") as day
    | _raw as client_request_user_agent
    | count(client_request_user_agent) as cc by day, client_request_user_agent
    | accum cc as running_total by client_request_user_agent

    Comment actions Permalink

Please sign in to leave a comment.