https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91400#M23506 <P>Ok, I think I have this. I was just in syntax hell.</P> Wed, 10 Jul 2013 20:16:45 GMT RVDowning 2013-07-10T20:16:45Z https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91399#M23505 <P>stats count as #PlanOpen, <BR /> count(eval(NumRows &lt; 50)) as SmallPlans , <BR /> count(eval(NumRows&gt;=50 AND NumRows &lt;200)) as MediumPlans, <BR /> count(eval(NumRows &gt;=200)) as LargePlans </P> <P>With a query such as above and a field SecsElapsed in each row, is there a way to get the average of that field for each category, namely SmallPlans, MediumPlans and LargePlans?</P> Wed, 10 Jul 2013 18:34:39 GMT https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91399#M23505 RVDowning 2013-07-10T18:34:39Z https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91400#M23506 <P>Ok, I think I have this. I was just in syntax hell.</P> Wed, 10 Jul 2013 20:16:45 GMT https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91400#M23506 RVDowning 2013-07-10T20:16:45Z https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91401#M23507 <P>Can you change this so the code is formatted please? Thanks <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Wed, 10 Jul 2013 20:33:07 GMT https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91401#M23507 cpeteman 2013-07-10T20:33:07Z https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91402#M23508 <P>Have no idea if that is what you meant or not.</P> Thu, 11 Jul 2013 11:36:18 GMT https://community.splunk.com/t5/Splunk-Search/Getting-average-times-for-user-defined-categories/m-p/91402#M23508 RVDowning 2013-07-11T11:36:18Z