Splunk Search

Calculate average execution time for a known field

mhornste
Path Finder

Hi,

I'm having issues calculating the average execution time of an available field in Splunk. I have searched for some time now on Splunk Answers and tried a lot, but unfortunately couldn't find s.th. helpful.

The following search string lists the Execution Times of a specific function of my application for the selected time span:

index= otcs FunctionAction="ngd.folderview" | table ExecutionTime

I'd like to have an output of this FunctionAction with the average Execution time of the selected time frame of all values listed by the search string. I already did some tests like avg(ExecutionTime) and had some results as Single Value, but the average was not correct (I double checked with Excel: restricted the time span to have only a few values).

Could anyone point me to the right direction?

Thanks!

Tags (3)
0 Karma

woodcock
Esteemed Legend

Like this:

 index= otcs FunctionAction="ngd.folderview" | stats avg(ExecutionTime)
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...