https://community.splunk.com/t5/Splunk-Search/How-to-aggregate-data-in-an-index/m-p/433217#M191135 <P>Hi,</P> <P>you could try:</P> <PRE><CODE>index=source_index | timechart span=1minute avg(your_integer_field) AS your_integer_field | collect index=destination_index </CODE></PRE> <P>Check out the collect command: <BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Collect">https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Collect</A></P> <P>Greetings Chris</P> Tue, 06 Aug 2019 14:17:37 GMT chris1337 2019-08-06T14:17:37Z https://community.splunk.com/t5/Splunk-Search/How-to-aggregate-data-in-an-index/m-p/433216#M191134 <P>Right now we receive and store several data points per second in an index and do reporting on it.<BR /> In the future we would like to aggregate this data by calculating the average value of all data points (integer values) per minute and store it in a seperate index,<BR /> How do you do this?</P> Tue, 06 Aug 2019 08:14:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-aggregate-data-in-an-index/m-p/433216#M191134 philipfritsch 2019-08-06T08:14:23Z https://community.splunk.com/t5/Splunk-Search/How-to-aggregate-data-in-an-index/m-p/433217#M191135 <P>Hi,</P> <P>you could try:</P> <PRE><CODE>index=source_index | timechart span=1minute avg(your_integer_field) AS your_integer_field | collect index=destination_index </CODE></PRE> <P>Check out the collect command: <BR /> <A href="https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Collect">https://docs.splunk.com/Documentation/Splunk/7.3.1/SearchReference/Collect</A></P> <P>Greetings Chris</P> Tue, 06 Aug 2019 14:17:37 GMT https://community.splunk.com/t5/Splunk-Search/How-to-aggregate-data-in-an-index/m-p/433217#M191135 chris1337 2019-08-06T14:17:37Z