Splunk Search

How to get Daily average value of a field

jenkinsta
Path Finder

I have voltage data and want to get the average volts value per day for the last 7 days. 

This is where I left off from using bin to multiple timecharts and still nothing. 

source="/root/Scripts/VoltageLogger/Voltage.json" host="util" sourcetype="_json"
| timechart span=1d count by avg(voltage)

 

 

Labels (2)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

This should work - you are not counting, but calculating average, so use avg(voltage) like this

source="/root/Scripts/VoltageLogger/Voltage.json" host="util" sourcetype="_json"
| timechart span=1d avg(voltage) as avg_voltage

 

View solution in original post

0 Karma

bowesmana
SplunkTrust
SplunkTrust

This should work - you are not counting, but calculating average, so use avg(voltage) like this

source="/root/Scripts/VoltageLogger/Voltage.json" host="util" sourcetype="_json"
| timechart span=1d avg(voltage) as avg_voltage

 

0 Karma

jenkinsta
Path Finder

THanks, was close but long day and brain stopped working. 

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...