Splunk Enterprise

math operations on multiple fields of table

Engager

using a base query i am able to create a table with various fields like this.

field1 field2

3263.68
90449.1
75149.25
60299.4
56167.44
27539.73
36179.64

 

Now i need to find various stats operations by each field in efficient way as base query is quite heavy.

need output something like - 

 average90thpercentile95thpercentile
field15060.680.2
field2150.2190.3210.2

 

 

Labels (1)
0 Karma

Champion
.... 
| stats avg(field1) as avg1 avg(field2) as avg2 p90(field1) as per1_90 p90(field2) as per2_90 p95(field1) as per1_95 p95(field2) as per2_95

is this what you are looking for?

r. Ismo

0 Karma