https://community.splunk.com/t5/Splunk-Search/Average-command-vs-count-and-average-command/m-p/370263#M109048 <P>Can you provide a link to an example of that? The way you quoted it here it doesn’t make too much sense to me...</P> Sun, 29 Apr 2018 07:26:55 GMT FrankVl 2018-04-29T07:26:55Z https://community.splunk.com/t5/Splunk-Search/Average-command-vs-count-and-average-command/m-p/370262#M109047 <P>Maybe im just bad in mathematics. but why does splunk docs always take the count of events and then the avg of events <CODE>(stats count(events) | stats avg(events) instead of stats avg events</CODE> directly?</P> <P>can someone please explain the logic to me?</P> Sun, 29 Apr 2018 06:40:56 GMT https://community.splunk.com/t5/Splunk-Search/Average-command-vs-count-and-average-command/m-p/370262#M109047 ranjitbrhm1 2018-04-29T06:40:56Z https://community.splunk.com/t5/Splunk-Search/Average-command-vs-count-and-average-command/m-p/370263#M109048 <P>Can you provide a link to an example of that? The way you quoted it here it doesn’t make too much sense to me...</P> Sun, 29 Apr 2018 07:26:55 GMT https://community.splunk.com/t5/Splunk-Search/Average-command-vs-count-and-average-command/m-p/370263#M109048 FrankVl 2018-04-29T07:26:55Z https://community.splunk.com/t5/Splunk-Search/Average-command-vs-count-and-average-command/m-p/370264#M109049 <P>Hello,</P> <P>The avg function applie to number field <CODE>avg(event)</CODE> the event is number, you can apply avg directly to the field that have the number value without use stats count, and when you use <CODE>| stats count | stats avg</CODE> the avg look only to the result give by <CODE>stats count</CODE><BR /> For example: </P> <PRE><CODE> stats count as a by field | stats avg(a) </CODE></PRE> <P>can you share the link of docs please</P> <P>Regards</P> Sun, 29 Apr 2018 08:47:19 GMT https://community.splunk.com/t5/Splunk-Search/Average-command-vs-count-and-average-command/m-p/370264#M109049 TISKAR 2018-04-29T08:47:19Z