Splunk Search

How do I create a search that will show the average call durations for each of the three locations below?

vstevenson
New Member

How do I create a search that will show the average call durations for each of the three locations below?
Where AVG_DURATION for “California” = 200000+6000/2
Where AVG_DURATION for “Colorado” = 1100+6000/2
Where AVG_DURATION for “Texas” =5400+9000+300000/3

Egress_Remote_Signaling_Device - Call_Duration
California - 200000
California - 6000
Colorado 1100
Colorado - 6000
Texas - 5400
Texas - 9000
Texas - 300000

Tags (2)
0 Karma
1 Solution

Richfez
SplunkTrust
SplunkTrust

mysearch | stats avg(Call_Duration) by Egress_Remote_Signaling_Device ?

That assumes Splunk is actually returning the field names you have listed. Replace "mysearch" with whatever search returns the list you gave above.

View solution in original post

Richfez
SplunkTrust
SplunkTrust

mysearch | stats avg(Call_Duration) by Egress_Remote_Signaling_Device ?

That assumes Splunk is actually returning the field names you have listed. Replace "mysearch" with whatever search returns the list you gave above.

vstevenson
New Member

Thanks Rich!

0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...