https://community.splunk.com/t5/Splunk-Search/How-to-search-and-calculate-the-average-for-the-top-70-percent/m-p/113972#M30098 <P>How to calculate the average for top 70%. A field in log contains a value. I need to ignore the least 30% and then calculate average.</P> Sat, 06 Sep 2014 05:12:18 GMT bkcstone 2014-09-06T05:12:18Z https://community.splunk.com/t5/Splunk-Search/How-to-search-and-calculate-the-average-for-the-top-70-percent/m-p/113972#M30098 <P>How to calculate the average for top 70%. A field in log contains a value. I need to ignore the least 30% and then calculate average.</P> Sat, 06 Sep 2014 05:12:18 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-and-calculate-the-average-for-the-top-70-percent/m-p/113972#M30098 bkcstone 2014-09-06T05:12:18Z https://community.splunk.com/t5/Splunk-Search/How-to-search-and-calculate-the-average-for-the-top-70-percent/m-p/113973#M30099 <P>Try this</P> <PRE><CODE>some search terms.. | sort 0 - Field_Of_Interest | streamstats count as Rank | eventstats count as TotalRows | where Rank&lt;(TotalRows * 0.7) | stats avg(Field_Of_Interest) as Required_Average </CODE></PRE> Sat, 06 Sep 2014 05:31:16 GMT https://community.splunk.com/t5/Splunk-Search/How-to-search-and-calculate-the-average-for-the-top-70-percent/m-p/113973#M30099 strive 2014-09-06T05:31:16Z