topic Average with filter in Dashboards & Visualizations

Average with filter

Lucie99 — Mon, 10 Aug 2020 13:22:29 GMT

Hi everyone,

I don't know how to do the average of the "Moy" for all Debit = 5 and per month with DateJour and after this exactly the same but with Debit =25.

Has somebody an idea ?

I tried many instructions but don't work ..

Thank you in advance

Re: Average with filter

isoutamo — Tue, 11 Aug 2020 11:52:19 GMT

Please try:

<base search> | bin span=1mon DateJour | stats avg(Moy) as avgMoy by DateJour, Depit

I'm expecting that DateJour is containing time as epoch? If not then you must convert it first to epoch or use _time (instead of DateJour) which already is in correct format.

r. Ismo

Re: Average with filter

Lucie99 — Tue, 11 Aug 2020 11:32:56 GMT

Hi thanks for helping me. This instruction that is very simiral to yours works, but it gives me the average of all debits (5 and 25) ! How can I do separately the average for debit = 5 and the 2nd average for debit = 25 ?

| stats avg(Moy) as AvgMoy by _time, Debit (I used this)

Thank you

Re: Average with filter

isoutamo — Tue, 11 Aug 2020 11:51:45 GMT

I'm not sure if I understood your question, but if you want those avgs one by one with separate queries then this helps.

<base query> Debit=5 | bin span=1mon _time | stats avg(Moy) as AvgMoy by _time, Debit

And then the second query with debit=25. And if you couldn't add that on the index=.... then you can catch those lines with

| where debit = 5

later on, but before that stats on your query.

If you are meaning something else then please explain that little bite more.

r. Ismo