Splunk Search

Calculate avg excluding the min and max times

carlpier
Explorer

Hello,
I am looking for a way to calculate the avg excluding the occurrence with the time_min and time_max
Here is the simple base search:
index="nbdrest-performance" sourcetype="PerfNBDCustomTSV" | chart count min(ETms) max(ETms) avg(ETms) by Service | sort count | reverse
Any help would be greatly appreciated.
Thanks in advance!

Tags (2)

fdi01
Motivator

index="nbdrest-performance" sourcetype="PerfNBDCustomTSV" | chart avg count by Service | sort by count

or

index="nbdrest-performance" sourcetype="PerfNBDCustomTSV" | stats count avg by Service | sort by count

0 Karma
Get Updates on the Splunk Community!

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...

Data Management Digest – November 2025

  Welcome to the inaugural edition of Data Management Digest! As your trusted partner in data innovation, the ...

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...