topic How to create an average on the position for each value in events (ex: Dog = position 1 and 5, Average for Dog = 3)? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151717#M42476 <P>Hi Wonder if any of the community can help me.</P> <P>I'm trying to create an average of some data, and running into problems.</P> <P>My data looks like this</P> <P>Fieldname is Animals</P> <P>Event 1 - "Dog","Cat","Horse","Rabbit","Zebra" <BR /> Event 2 - "Zebra","Horse","Cat","Rabbit","Dog"</P> <P>I'm trying to create an average for each element (i.e each animal) in the event, based on it's position.</P> <P>So - <BR /> Dog = position 1 and 5<BR /> Cat = position 2 and 3<BR /> Horse = position 3 and 2<BR /> etc</P> <P>what I want out the back of this, is a table that looks like the following</P> <P>Animal Avg<BR /> Dog 3<BR /> Cat 2.5<BR /> Horse 2.5<BR /> Rabbit 4<BR /> Zebra 2.5</P> <P>Many Thanks for any help.</P> Mon, 20 Apr 2015 15:09:59 GMT JovanMilosevic 2015-04-20T15:09:59Z How to create an average on the position for each value in events (ex: Dog = position 1 and 5, Average for Dog = 3)? https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151717#M42476 <P>Hi Wonder if any of the community can help me.</P> <P>I'm trying to create an average of some data, and running into problems.</P> <P>My data looks like this</P> <P>Fieldname is Animals</P> <P>Event 1 - "Dog","Cat","Horse","Rabbit","Zebra" <BR /> Event 2 - "Zebra","Horse","Cat","Rabbit","Dog"</P> <P>I'm trying to create an average for each element (i.e each animal) in the event, based on it's position.</P> <P>So - <BR /> Dog = position 1 and 5<BR /> Cat = position 2 and 3<BR /> Horse = position 3 and 2<BR /> etc</P> <P>what I want out the back of this, is a table that looks like the following</P> <P>Animal Avg<BR /> Dog 3<BR /> Cat 2.5<BR /> Horse 2.5<BR /> Rabbit 4<BR /> Zebra 2.5</P> <P>Many Thanks for any help.</P> Mon, 20 Apr 2015 15:09:59 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151717#M42476 JovanMilosevic 2015-04-20T15:09:59Z Re: How to create an average on the position for each value in events (ex: Dog = position 1 and 5, Average for Dog = 3)? https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151718#M42477 <P>index=win |head 2| eval animals="Dog,Dog,Dog,Cat,Horse,Rabbit,Zebra"|eval animals= split(animals,",") |eval eventno=1 |accum eventno |mvexpand animals |streamstats count by eventno |stats avg(count) by animals</P> Mon, 20 Apr 2015 18:31:00 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151718#M42477 aalanisr26 2015-04-20T18:31:00Z Re: How to create an average on the position for each value in events (ex: Dog = position 1 and 5, Average for Dog = 3)? https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151719#M42478 <P>the index=win|head 2| <BR /> was just for testing purposes but I get the idea right?</P> Mon, 20 Apr 2015 18:43:21 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151719#M42478 aalanisr26 2015-04-20T18:43:21Z Re: How to create an average on the position for each value in events (ex: Dog = position 1 and 5, Average for Dog = 3)? https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151720#M42479 <P>Thats got it! </P> <P>Thanks - Really appreciate that.</P> Mon, 20 Apr 2015 20:56:43 GMT https://community.splunk.com/t5/Splunk-Search/How-to-create-an-average-on-the-position-for-each-value-in/m-p/151720#M42479 JovanMilosevic 2015-04-20T20:56:43Z