Calculates the sum for a field over a set of events. Result is returned in a field named _sum.

ParameterTypeRequiredDefault ValueDescription
asstringoptional[a]_sum Name of output field.
field[b]stringrequired  Field to extract a number from and sum over.

[a] Optional parameters use their default value unless explicitly set.

[b] The argument name field can be omitted.

Hide omitted argument names for this function

Show omitted argument names for this function

sum() Examples

How many bytes did our webserver send per minute

logscale
bucket(function=sum(bytes_sent))