Splunk Enterprise

math operations on multiple fields of table

mehuls93
Engager

using a base query i am able to create a table with various fields like this.

field1 field2

3263.68
90449.1
75149.25
60299.4
56167.44
27539.73
36179.64

 

Now i need to find various stats operations by each field in efficient way as base query is quite heavy.

need output something like - 

 average90thpercentile95thpercentile
field15060.680.2
field2150.2190.3210.2

 

 

Labels (1)
0 Karma

isoutamo
SplunkTrust
SplunkTrust
.... 
| stats avg(field1) as avg1 avg(field2) as avg2 p90(field1) as per1_90 p90(field2) as per2_90 p95(field1) as per1_95 p95(field2) as per2_95

is this what you are looking for?

r. Ismo

0 Karma
.conf21 Now Fully Virtual!
Register for FREE Today!

We've made .conf21 totally virtual and totally FREE! Our completely online experience will run from 10/19 through 10/20 with some additional events, too!