I have a dashboard that displays 3 radials. I want to display the average of the numeric result of those three radials also on the dashboard. I can create references to those radials and refer to their results something like ($ds_1:result.avg$ + $ds_3:result.avg$ + $ds_3:result.avg$) / 3 but I don't know how to create SPL to do just that vs looking up logs. For example, I tried
| eval avg=($ds_1:result.avg$ + $ds_3:result.avg$ + $ds_3:result.avg$) / 3 | table avg
this didn't work. For context, each of those referred datasources outputs avg(field) as avg.
How can I achieve what I'm after?
I figured this out using makeresults:
| makeresults format=csv data="val
$ds_1:result.avg$
$ds_3:result.avg$
$ds_3:result.avg$" | stats avg(val)
I figured this out using makeresults:
| makeresults format=csv data="val
$ds_1:result.avg$
$ds_3:result.avg$
$ds_3:result.avg$" | stats avg(val)
In SimpleXML dashboards, you can declare a done handler - in the done handler for each radial search, you can declare a token for the result you want. You can then use these tokens elsewhere in the dashboard.
I'm using Dashboard Studio. I can reference the final result (like I mentioned in my original post) but that is intended to feed into a search. I just want to use that final result as part of a mathematical equation -- averaging multiple final results together. Is that possible?