https://community.splunk.com/t5/Splunk-Search/Timechart-with-events-h-and-average-events-per-hour/m-p/319693#M95565 <P>Hello,</P> <P>I want to create a timechart that shows the amount of events per hour in the last 24 hours, <BR /> and a line in it that shows the average events per hour of the last 5 days. So far I'm stuck with this:</P> <PRE><CODE>index=test ACTION=RECEIVE | eval events=1 | timechart span=1h sum(events) </CODE></PRE> <P>How can I calculate the average events per hour of the last n-days and add it in that chart? <BR /> Any help is highly appreciated!</P> Wed, 12 Apr 2017 10:55:22 GMT ckunath 2017-04-12T10:55:22Z https://community.splunk.com/t5/Splunk-Search/Timechart-with-events-h-and-average-events-per-hour/m-p/319693#M95565 <P>Hello,</P> <P>I want to create a timechart that shows the amount of events per hour in the last 24 hours, <BR /> and a line in it that shows the average events per hour of the last 5 days. So far I'm stuck with this:</P> <PRE><CODE>index=test ACTION=RECEIVE | eval events=1 | timechart span=1h sum(events) </CODE></PRE> <P>How can I calculate the average events per hour of the last n-days and add it in that chart? <BR /> Any help is highly appreciated!</P> Wed, 12 Apr 2017 10:55:22 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-with-events-h-and-average-events-per-hour/m-p/319693#M95565 ckunath 2017-04-12T10:55:22Z https://community.splunk.com/t5/Splunk-Search/Timechart-with-events-h-and-average-events-per-hour/m-p/319694#M95566 <P>Hello, ckunath</P> <P>May be it is not optimal query but hope help you solve your task</P> <P>index=test ACTION=RECEIVE earliest=-24h | eval events=1 | timechart span=1h sum(events) as T | eval temp_field="field_for_join" <BR /> | join temp_field [search index=test ACTION=RECEIVE earliest=-5d | eval events=1 | stats count(events) as Count_hour_mday by date_hour date_mday <BR /> | stats avg( Count_hour_mday) as avg_events | eval temp_field="field_for_join" ]</P> Tue, 29 Sep 2020 13:39:38 GMT https://community.splunk.com/t5/Splunk-Search/Timechart-with-events-h-and-average-events-per-hour/m-p/319694#M95566 andrey2007 2020-09-29T13:39:38Z