Hi, I want to get the count of errors. So i have a query to get the count by status where status is greater than 400. When i use addcoltotals, it is thinking status as a column and hence it is giving the total for both. How can i get that?
/Current No status count 1 200 26 2 302 57 3 502 83
Expected
No status count 1 200 26 2 302 57 3 Total 83
sourcetype=access_combined_wcookie host="qqqq" uri=/checklogin status>400 | stats count by status | addcoltotals label=Total labelfield=status