<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How do you aggregate two types of data? in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421664#M94071</link>
    <description>&lt;P&gt;Thank you! If i have two different sources is it possible to aggregate those two togther and let's say find the average for both of them ? Or i have to find the average of each of them seperatly. &lt;/P&gt;</description>
    <pubDate>Wed, 10 Oct 2018 15:58:50 GMT</pubDate>
    <dc:creator>maryamchar</dc:creator>
    <dc:date>2018-10-10T15:58:50Z</dc:date>
    <item>
      <title>How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421659#M94066</link>
      <description>&lt;P&gt;Does aggregate mean using (sum, average, count etc) or does it mean something else? Please give an example on how to aggregate two types of data. &lt;/P&gt;

&lt;P&gt;I'm using Splunk Search and Reporting (search query only) &lt;/P&gt;</description>
      <pubDate>Tue, 09 Oct 2018 19:43:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421659#M94066</guid>
      <dc:creator>maryamchar</dc:creator>
      <dc:date>2018-10-09T19:43:29Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421660#M94067</link>
      <description>&lt;P&gt;can you provide sample data and search string?&lt;/P&gt;</description>
      <pubDate>Tue, 09 Oct 2018 20:36:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421660#M94067</guid>
      <dc:creator>marycordova</dc:creator>
      <dc:date>2018-10-09T20:36:29Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421661#M94068</link>
      <description>&lt;P&gt;The data i have are xml files and lookup tables. I just want an explannation of what aggregate two data types mean. Thanks! &lt;/P&gt;</description>
      <pubDate>Tue, 09 Oct 2018 20:40:15 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421661#M94068</guid>
      <dc:creator>maryamchar</dc:creator>
      <dc:date>2018-10-09T20:40:15Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421662#M94069</link>
      <description>&lt;P&gt;"aggregate" depends on what you are trying to find out:&lt;/P&gt;

&lt;P&gt;can be used with  &lt;CODE&gt;| stats&lt;/CODE&gt; or  &lt;CODE&gt;| chart&lt;/CODE&gt; for example:&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/CommonStatsFunctions#Supported_functions_and_syntax"&gt;http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/CommonStatsFunctions#Supported_functions_and_syntax&lt;/A&gt;&lt;/P&gt;

&lt;P&gt;or with  &lt;CODE&gt;| eval&lt;/CODE&gt; for example:&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/MathematicalFunctions"&gt;http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/MathematicalFunctions&lt;/A&gt;&lt;BR /&gt;
&lt;A href="http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/StatisticalFunctions"&gt;http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/StatisticalFunctions&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 09 Oct 2018 20:45:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421662#M94069</guid>
      <dc:creator>marycordova</dc:creator>
      <dc:date>2018-10-09T20:45:57Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421663#M94070</link>
      <description>&lt;P&gt;Hi ,&lt;/P&gt;

&lt;P&gt;You can check the below link on aggregate functions and how to use those functions in splunk&lt;/P&gt;

&lt;P&gt;&lt;A href="http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/Aggregatefunctions"&gt;http://docs.splunk.com/Documentation/Splunk/7.2.0/SearchReference/Aggregatefunctions&lt;/A&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 10 Oct 2018 15:46:48 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421663#M94070</guid>
      <dc:creator>iamarkaprabha</dc:creator>
      <dc:date>2018-10-10T15:46:48Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421664#M94071</link>
      <description>&lt;P&gt;Thank you! If i have two different sources is it possible to aggregate those two togther and let's say find the average for both of them ? Or i have to find the average of each of them seperatly. &lt;/P&gt;</description>
      <pubDate>Wed, 10 Oct 2018 15:58:50 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421664#M94071</guid>
      <dc:creator>maryamchar</dc:creator>
      <dc:date>2018-10-10T15:58:50Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421665#M94072</link>
      <description>&lt;P&gt;Thank you! &lt;/P&gt;</description>
      <pubDate>Wed, 10 Oct 2018 17:53:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421665#M94072</guid>
      <dc:creator>maryamchar</dc:creator>
      <dc:date>2018-10-10T17:53:31Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421666#M94073</link>
      <description>&lt;P&gt;Yes , it is possible to aggregate those two together and find the average for both of them &lt;/P&gt;</description>
      <pubDate>Wed, 10 Oct 2018 18:30:21 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421666#M94073</guid>
      <dc:creator>iamarkaprabha</dc:creator>
      <dc:date>2018-10-10T18:30:21Z</dc:date>
    </item>
    <item>
      <title>Re: How do you aggregate two types of data?</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421667#M94074</link>
      <description>&lt;P&gt;Thank you! do you have an example please ? &lt;/P&gt;</description>
      <pubDate>Wed, 10 Oct 2018 18:37:01 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-do-you-aggregate-two-types-of-data/m-p/421667#M94074</guid>
      <dc:creator>maryamchar</dc:creator>
      <dc:date>2018-10-10T18:37:01Z</dc:date>
    </item>
  </channel>
</rss>

