Splunk Enterprise

math operations on multiple fields of table

mehuls93
Engager

using a base query i am able to create a table with various fields like this.

field1 field2

3263.68
90449.1
75149.25
60299.4
56167.44
27539.73
36179.64

 

Now i need to find various stats operations by each field in efficient way as base query is quite heavy.

need output something like - 

 average90thpercentile95thpercentile
field15060.680.2
field2150.2190.3210.2

 

 

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
.... 
| stats avg(field1) as avg1 avg(field2) as avg2 p90(field1) as per1_90 p90(field2) as per2_90 p95(field1) as per1_95 p95(field2) as per2_95

is this what you are looking for?

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In the last month, the Splunk Threat Research Team (STRT) has had 2 releases of new security content via the ...

Announcing the 1st Round Champion’s Tribute Winners of the Great Resilience Quest

We are happy to announce the 20 lucky questers who are selected to be the first round of Champion's Tribute ...

We’ve Got Education Validation!

Are you feeling it? All the career-boosting benefits of up-skilling with Splunk? It’s not just a feeling, it's ...