Splunk Enterprise

math operations on multiple fields of table

mehuls93
Engager

using a base query i am able to create a table with various fields like this.

field1 field2

3263.68
90449.1
75149.25
60299.4
56167.44
27539.73
36179.64

 

Now i need to find various stats operations by each field in efficient way as base query is quite heavy.

need output something like - 

 average90thpercentile95thpercentile
field15060.680.2
field2150.2190.3210.2

 

 

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
.... 
| stats avg(field1) as avg1 avg(field2) as avg2 p90(field1) as per1_90 p90(field2) as per2_90 p95(field1) as per1_95 p95(field2) as per2_95

is this what you are looking for?

r. Ismo

0 Karma
Get Updates on the Splunk Community!

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...

Cloud Monitoring Console - Unlocking Greater Visibility in SVC Usage Reporting

For Splunk Cloud customers, understanding and optimizing Splunk Virtual Compute (SVC) usage and resource ...

Automatic Discovery Part 3: Practical Use Cases

If you’ve enabled Automatic Discovery in your install of the Splunk Distribution of the OpenTelemetry ...