Splunk Search

Calculate avg excluding the min and max times

carlpier
Explorer

Hello,
I am looking for a way to calculate the avg excluding the occurrence with the time_min and time_max
Here is the simple base search:
index="nbdrest-performance" sourcetype="PerfNBDCustomTSV" | chart count min(ETms) max(ETms) avg(ETms) by Service | sort count | reverse
Any help would be greatly appreciated.
Thanks in advance!

Tags (2)

fdi01
Motivator

index="nbdrest-performance" sourcetype="PerfNBDCustomTSV" | chart avg count by Service | sort by count

or

index="nbdrest-performance" sourcetype="PerfNBDCustomTSV" | stats count avg by Service | sort by count

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...