Splunk Search

How to get Daily average value of a field

jenkinsta
Path Finder

I have voltage data and want to get the average volts value per day for the last 7 days. 

This is where I left off from using bin to multiple timecharts and still nothing. 

source="/root/Scripts/VoltageLogger/Voltage.json" host="util" sourcetype="_json"
| timechart span=1d count by avg(voltage)

 

 

Labels (2)
0 Karma
1 Solution

bowesmana
SplunkTrust
SplunkTrust

This should work - you are not counting, but calculating average, so use avg(voltage) like this

source="/root/Scripts/VoltageLogger/Voltage.json" host="util" sourcetype="_json"
| timechart span=1d avg(voltage) as avg_voltage

 

View solution in original post

0 Karma

bowesmana
SplunkTrust
SplunkTrust

This should work - you are not counting, but calculating average, so use avg(voltage) like this

source="/root/Scripts/VoltageLogger/Voltage.json" host="util" sourcetype="_json"
| timechart span=1d avg(voltage) as avg_voltage

 

0 Karma

jenkinsta
Path Finder

THanks, was close but long day and brain stopped working. 

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Video | Tom’s Smartness Journey Continues

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...