# How to multiplie two columuns in table?
**URL:** https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122
**Category:** Kibana
**Created:** [August 6, 2018, 8:30am UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122 "2018-08-06T08:30:51Z")
**Posts on this page:** 14
**Page:** 1
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 6, 2018, 8:30am UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/1 "2018-08-06T08:30:51Z")
hello evreyone ,
i have a table contains three columuns "clientip" , "bytes\_sent" & "count" , so my goal is to measure "bytes\_sent" \* "count"
for example ;
for this clientip the result is 166\*2 = 332.
thanks .
---
### Author:  [@christophilus](https://discuss.elastic.co/u/christophilus)
#### Post date: [August 6, 2018, 1:41pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/2 "2018-08-06T13:41:54Z")
It looks to me as if what you are trying to do is figure out how many total bytes have been sent by an IP address, correct?
For example:
To do that, you need your metric to be "Sum" of bytes\_sent, and then you need a bucket that does Terms aggregation on "clientip.keyword":
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 6, 2018, 2:11pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/3 "2018-08-06T14:11:25Z")
yes but in the Field section i d'ont have "bytes\_sent" !!!
---
### Author:  [@christophilus](https://discuss.elastic.co/u/christophilus)
#### Post date: [August 6, 2018, 4:09pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/4 "2018-08-06T16:09:23Z")
Where is "bytes\_sent: Ascending" coming from in your table?
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 6, 2018, 4:17pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/5 "2018-08-06T16:17:55Z")
> [@christophilus](#):
>
> ytes\_sent: Ascending
this is my problem when i select the metric on sum i d'ont found "bytes\_sent" !!!
---
### Author:  [@christophilus](https://discuss.elastic.co/u/christophilus)
#### Post date: [August 6, 2018, 4:21pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/6 "2018-08-06T16:21:29Z")
I don't have enough information to go on, then. You need to have a field that you can aggregate. In your screenshot, it looks like you have a field called "bytes\_sent", but if not, you need to aggregate on whatever field you have that represents that data.
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 6, 2018, 4:30pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/7 "2018-08-06T16:30:21Z")
yes i understood , it's ok when i select "terms" in aggregation i found "bytes\_sent" field but when i select "sum" or "max" ... expect "count" in aggregation i can't found "sent\_bytes" field so this is the problem
please help if you have any information
---
### Author:  [@christophilus](https://discuss.elastic.co/u/christophilus)
#### Post date: [August 6, 2018, 4:31pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/8 "2018-08-06T16:31:59Z")
What is the type of your bytes\_sent field? It looks numeric, and numeric fields should be available to the Sum operation.
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 6, 2018, 4:32pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/9 "2018-08-06T16:32:24Z")
it's string
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 6, 2018, 4:32pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/10 "2018-08-06T16:32:52Z")
so how can i change it to numeric??
---
### Author:  [@christophilus](https://discuss.elastic.co/u/christophilus)
#### Post date: [August 6, 2018, 4:34pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/11 "2018-08-06T16:34:00Z")
Ah. Yeah. You can't sum a string. That field needs to be a number. You might be able to get away with a scripted field to convert the string to a number at query-time:
[https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-script-fields.html](https://www.elastic.co/guide/en/elasticsearch/reference/current/search-request-script-fields.html)
But if possible, you should make the field numeric in the actual index, since it is a numeric field.
---
### Author:  [@med\_amine](https://discuss.elastic.co/u/med_amine)
#### Post date: [August 6, 2018, 6:15pm UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/12 "2018-08-06T18:15:27Z")
yes but in grok pattern i set the bytes sent as "number" , rellay i d'ont unterstand what i should do
please help me
---
### Author:  [@Abhilash\_B](https://discuss.elastic.co/u/Abhilash_B)
#### Post date: [August 13, 2018, 10:57am UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/13 "2018-08-13T10:57:28Z")
You should reindex the data with changed mappings for the field "bytes\_sent" and then proceed.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 10, 2018, 10:57am UTC](https://discuss.elastic.co/t/how-to-multiplie-two-columuns-in-table/143122/14 "2018-09-10T10:57:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.