https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130103#M184533 <P>oh...thanks!</P> Thu, 18 Sep 2014 14:09:57 GMT HeinzWaescher 2014-09-18T14:09:57Z https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130101#M184531 <P>Hi,</P> <P>I think the median calculation is incorrect when the total amount of values is an even number. </P> <P>An example:</P> <PRE><CODE>359 282 224 150 60 52 8 1 0 0 </CODE></PRE> <P>Splunk tells me the median is 60, but it should be 56.<BR /> In this case there is a pair of middle numbers and the median should be calcualted by median=(60+52)/2</P> <P>Am I correct?</P> <P>BR</P> <P>Heinz</P> Thu, 18 Sep 2014 13:14:04 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130101#M184531 HeinzWaescher 2014-09-18T13:14:04Z https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130102#M184532 <P>That's the documented behaviour as per <A href="http://docs.splunk.com/Documentation/Splunk/6.1.3/SearchReference/CommonStatsFunctions">http://docs.splunk.com/Documentation/Splunk/6.1.3/SearchReference/CommonStatsFunctions</A></P> <PRE><CODE>median(X): This function returns the middle-most value of the field X. Note: The median calculation is more correct for odd numbers of events. In cases where you have an even number of events, the median is approximated to be the higher of the two values. </CODE></PRE> Thu, 18 Sep 2014 14:05:12 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130102#M184532 martin_mueller 2014-09-18T14:05:12Z https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130103#M184533 <P>oh...thanks!</P> Thu, 18 Sep 2014 14:09:57 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130103#M184533 HeinzWaescher 2014-09-18T14:09:57Z https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130104#M184534 <P>That obviously doesn't rule out filing an Enhancement Request with Splunk Support to implement a more accurate <CODE>median()</CODE> function...</P> Thu, 18 Sep 2014 14:12:27 GMT https://community.splunk.com/t5/Splunk-Search/Why-is-the-result-of-the-median-function-incorrect-when-the/m-p/130104#M184534 martin_mueller 2014-09-18T14:12:27Z