topic Re: stats command file doubt in Splunk Search

stats command file doubt

rakesh_498115 — Tue, 30 Apr 2013 17:27:08 GMT

Hi,

Is the default stats command for computing avg,min,max and sdev a custom search command which calls the rawstats.py file?
I have disabled the rawstats command for my search app, but I am available to run the stats command.

Am I missing something or is my understanding wrong?

Please help.

Re: stats command file doubt

sdaniels — Tue, 30 Apr 2013 18:52:29 GMT

What are trying to achieve? Is there something wrong with the values that the stats command is returning?

Re: stats command file doubt

dart — Tue, 30 Apr 2013 18:54:04 GMT

The stats command is a builtin. rawstats is the command that uses rawstats.py:

[rawstats]
filename = rawstats.py
streaming = true
retainsevents = true
overrides_timeorder = false

Re: stats command file doubt

rakesh_498115 — Tue, 30 Apr 2013 19:11:54 GMT

no..values are correct only... i need to have some extra funtionality of stats command..so wanted to check that stats command file..cany you me help me in finding the exact file pls

Re: stats command file doubt

Ayn — Tue, 30 Apr 2013 19:15:31 GMT

As dart says, there is no external file. stats is a built-in command. If you need extra functionality, you'll need to build your own custom search command that adds it.

Re: stats command file doubt

rakesh_498115 — Tue, 30 Apr 2013 19:23:32 GMT

Ayn . can you please give me the sample code of avg function for stats command pls.. i need work for an extra functionlity on tat.

Re: stats command file doubt

rakesh_498115 — Tue, 30 Apr 2013 19:27:51 GMT

so dart . if i define my additional functionality to this piece of code in rawstats.py file

def stats(r):
"""returns the median, average, standard deviation, min and max of a sequence"""
tot = sum(r)
avg = tot/len(r)

sdsq = sum([(i-avg)**2 for i in r])
s = list(r)
s.sort()
return s[len(s)//2], avg, (sdsq/(len(r)-1 or 1))**.5, min(r), max(r)

and save it as seperate command .. will that work ??

Re: stats command file doubt

Ayn — Tue, 30 Apr 2013 19:28:38 GMT

I'm not sure what you didn't understand about that stats is an INTERNAL command. There IS no available code for it. rawstats.py seems like a good place to start with your own experiments.

Re: stats command file doubt

rakesh_498115 — Tue, 30 Apr 2013 19:46:07 GMT

ok Ayn.thanks 🙂

Re: stats command file doubt

Ayn — Tue, 30 Apr 2013 20:17:49 GMT

Why not try it?