https://community.splunk.com/t5/Splunk-Search/Cumulative-hourly-Average/m-p/462601#M130421 <P>Hi All,<BR /> I have counts of some offers for every hour eg 9-10 30 and then 10-11 - it is 40 <BR /> it should be cumulative one. For example <BR /> 00- 20<BR /> 01-(20+10)=30<BR /> 02-(30+20)=50 . But it will not be accumulated in the data. It will be just <BR /> 00-20<BR /> 01-10<BR /> 02-20<BR /> Now i have 15 days data. like this<BR /> 30 th March 00- 20, 01-10,02,-20<BR /> 31st March 00-10,01-15,02-15<BR /> 1st April 00-10,01-20,02-15</P> <P>Now firsrt dat a should be changed like thi s through splunk <BR /> 30 th March 00- 20, 01-30,02,-50<BR /> 31st March 00-10,01-25,02-40<BR /> 1st April 00-10,01-30,02-45</P> <P>Then i have to take median or average by hours.</P> <P>Please help </P> Wed, 01 Apr 2020 12:11:58 GMT Rukmani_Splunk 2020-04-01T12:11:58Z https://community.splunk.com/t5/Splunk-Search/Cumulative-hourly-Average/m-p/462601#M130421 <P>Hi All,<BR /> I have counts of some offers for every hour eg 9-10 30 and then 10-11 - it is 40 <BR /> it should be cumulative one. For example <BR /> 00- 20<BR /> 01-(20+10)=30<BR /> 02-(30+20)=50 . But it will not be accumulated in the data. It will be just <BR /> 00-20<BR /> 01-10<BR /> 02-20<BR /> Now i have 15 days data. like this<BR /> 30 th March 00- 20, 01-10,02,-20<BR /> 31st March 00-10,01-15,02-15<BR /> 1st April 00-10,01-20,02-15</P> <P>Now firsrt dat a should be changed like thi s through splunk <BR /> 30 th March 00- 20, 01-30,02,-50<BR /> 31st March 00-10,01-25,02-40<BR /> 1st April 00-10,01-30,02-45</P> <P>Then i have to take median or average by hours.</P> <P>Please help </P> Wed, 01 Apr 2020 12:11:58 GMT https://community.splunk.com/t5/Splunk-Search/Cumulative-hourly-Average/m-p/462601#M130421 Rukmani_Splunk 2020-04-01T12:11:58Z