https://community.splunk.com/t5/Splunk-Search/simple-moving-average/m-p/316912#M163594 <P>hi , </P> <P>i am analysing the daily data of product which has a closing price. i wish to find all products which has closing price greater than the moving average of lets say 5 days , 10 days. i am getting the correctly calculated sma but not in the desired row i.e. for 16th jan 18, DMA is calculated in 10th jan 18. </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4182i2B5B489A3ABDD49E/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>request you to please suggest the solution. </P> <P>i wanted to show the product if the closing price is less than 5dma , in this case i.e. 16 jan 18, closing price is less than 5 DMA but the query is not showing the result. </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4183i04F1B136F411A841/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Tue, 16 Jan 2018 17:22:39 GMT himpor 2018-01-16T17:22:39Z https://community.splunk.com/t5/Splunk-Search/simple-moving-average/m-p/316912#M163594 <P>hi , </P> <P>i am analysing the daily data of product which has a closing price. i wish to find all products which has closing price greater than the moving average of lets say 5 days , 10 days. i am getting the correctly calculated sma but not in the desired row i.e. for 16th jan 18, DMA is calculated in 10th jan 18. </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4182i2B5B489A3ABDD49E/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> <P>request you to please suggest the solution. </P> <P>i wanted to show the product if the closing price is less than 5dma , in this case i.e. 16 jan 18, closing price is less than 5 DMA but the query is not showing the result. </P> <P><span class="lia-inline-image-display-wrapper" image-alt="alt text"><img src="https://community.splunk.com/t5/image/serverpage/image-id/4183i04F1B136F411A841/image-size/large?v=v2&amp;px=999" role="button" title="alt text" alt="alt text" /></span></P> Tue, 16 Jan 2018 17:22:39 GMT https://community.splunk.com/t5/Splunk-Search/simple-moving-average/m-p/316912#M163594 himpor 2018-01-16T17:22:39Z https://community.splunk.com/t5/Splunk-Search/simple-moving-average/m-p/316913#M163595 <P>I believe the issue is that Splunk is calculating the sma in reverse-chronological order, because this is the ordering of the results. If you replace your command <CODE>| sort -Date</CODE> with <CODE>| sort Date</CODE>, calculate your averages, and then put things back in your desired ordering by adding <CODE>|sort -Date</CODE> after the calculations - this should get you the actual averages you are seeking.</P> Tue, 16 Jan 2018 17:35:00 GMT https://community.splunk.com/t5/Splunk-Search/simple-moving-average/m-p/316913#M163595 elliotproebstel 2018-01-16T17:35:00Z