Calculates the sum for a field over a set of events. Result is returned in a field named _sum.
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscalesum("field")
and:
logscalesum(field="field")
These examples show basic structure only.
sum()
Examples
How many bytes did our webserver send per minute
logscale
bucket(function=sum(bytes_sent))