https://community.splunk.com/t5/Splunk-Search/Need-help-with-spl-query/m-p/703094#M238345 <LI-CODE lang="markup">index=web_logs sourcetype=access_combined | eval request_duration=round(duration/1000, 2) | stats avg(request_duration) as avg_duration by host, uri_path | where avg_duration &gt; 2 | sort - avg_duration</LI-CODE> Wed, 30 Oct 2024 17:29:03 GMT xaviershebha 2024-10-30T17:29:03Z https://community.splunk.com/t5/Splunk-Search/Need-help-with-spl-query/m-p/703094#M238345 <LI-CODE lang="markup">index=web_logs sourcetype=access_combined | eval request_duration=round(duration/1000, 2) | stats avg(request_duration) as avg_duration by host, uri_path | where avg_duration &gt; 2 | sort - avg_duration</LI-CODE> Wed, 30 Oct 2024 17:29:03 GMT https://community.splunk.com/t5/Splunk-Search/Need-help-with-spl-query/m-p/703094#M238345 xaviershebha 2024-10-30T17:29:03Z https://community.splunk.com/t5/Splunk-Search/Need-help-with-spl-query/m-p/703101#M238350 <P>What help do you need? Please explain what your issue is, and what your desired results would look like.</P> Wed, 30 Oct 2024 11:54:39 GMT https://community.splunk.com/t5/Splunk-Search/Need-help-with-spl-query/m-p/703101#M238350 ITWhisperer 2024-10-30T11:54:39Z