Splunk Enterprise

math operations on multiple fields of table

mehuls93
Engager

using a base query i am able to create a table with various fields like this.

field1 field2

3263.68
90449.1
75149.25
60299.4
56167.44
27539.73
36179.64

 

Now i need to find various stats operations by each field in efficient way as base query is quite heavy.

need output something like - 

 average90thpercentile95thpercentile
field15060.680.2
field2150.2190.3210.2

 

 

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
.... 
| stats avg(field1) as avg1 avg(field2) as avg2 p90(field1) as per1_90 p90(field2) as per2_90 p95(field1) as per1_95 p95(field2) as per2_95

is this what you are looking for?

r. Ismo

0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.