Getting Data In

How to split values present in a cell in different rows?

rajeswarir
New Member

alt text

In this attached multiple values are grouped in table. I want to split all the values separately so that i can calculate average for each field

0 Karma
1 Solution

493669
Super Champion
0 Karma

niketn
Legend

@rajeswarir what is your existing query which gives the above table. If you are interested in Average and not multi valued fields, you can do the same upfront using appropriate statistical function from transforming command. Rather than circumventing through multi-valued field.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

rajeswarir
New Member

Hi niketnilay,

my query is:
source="K_range.log" OR source="AD_range.log" OR source="R_range.zip:" Cycle={C3.100.5}
|transaction CommonFieldbetweenalllogs
|table S.No Cycle R_Time K_Time A_Time D_Time|eval S.No=1 | accum S.No

can u please explain how can i compute average without splitting the values using transforming command.

I need to calculate 2 things here:
1. Average for all the fields
2. one more field named "RA_Time" which is the addition of R_Time+A_Time

0 Karma

493669
Super Champion
0 Karma
Get Updates on the Splunk Community!

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...