Getting Data In

How to split values present in a cell in different rows?

New Member

alt text

In this attached multiple values are grouped in table. I want to split all the values separately so that i can calculate average for each field

0 Karma
1 Solution

Super Champion
0 Karma

SplunkTrust
SplunkTrust

@rajeswarir what is your existing query which gives the above table. If you are interested in Average and not multi valued fields, you can do the same upfront using appropriate statistical function from transforming command. Rather than circumventing through multi-valued field.

____________________________________________
| makeresults | eval message= "Happy Splunking!!!"
0 Karma

New Member

Hi niketnilay,

my query is:
source="Krange.log" OR source="ADrange.log" OR source="Rrange.zip:" Cycle={C3.100.5}
|transaction CommonFieldbetweenalllogs
|table S.No Cycle R
Time KTime ATime D_Time|eval S.No=1 | accum S.No

can u please explain how can i compute average without splitting the values using transforming command.

I need to calculate 2 things here:
1. Average for all the fields
2. one more field named "RATime" which is the addition of RTime+A_Time

0 Karma

Super Champion
0 Karma