Eval and Status

[peter_gianusso]

I want to get a average of the indexing latency time by host.

index = ili_imaging_index| eval latency =_time - _indextime| table avg(latency) by host

This is returning useless stuff. This seems so simple!!

[peter_gianusso · Accepted solution]

this works

index = ili_imaging_index| eval latency =_time - _indextime| stats sum(latency) by host