Splunk Search

How can I calculate stats of a chart list?

yk010123
Path Finder

I have the following query : 

 

... | chart list(time) by request  actor

 

Where time it returns the time for each actor such as 

 

actor1actor2

10

20

10
  
  

 

How can I add a new column with the averages for each one?

Labels (1)
0 Karma

yuanliu
SplunkTrust
SplunkTrust

You didn't list the first column of the chart.  If I understand your chart correctly, that would be request.  Thus, just run avg() by request.

| stats avg(*) as * by request

 

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...