This works for me.
..| timechart span=1d count|appendpipe [stats avg(count) as Average]
Thanks to @echalex
The correct command for this would be appendpipe
.
Say you have something like: ...|stats sum(score) AS totalscore by item
. Then you can do this: ...|appendpipe [stats avg(totalscore) AS totalscore |eval item="AVERAGE"]
. (You need to use AS
in appendpipe
in order to put the average in the same column. You can leave item empt, if you want.)
Hi,
You can try using search command addcoltotals.
Thanks!!