I would like to get a list of all the timestamps in my data.
They are stored in a field called time.
Normally I would use
However, I would like to group all times within approximately 10 seconds as 1 selection.
Maybe choose the average time as the value of this group.
Thanks
You should be able to use the "bucket" search command. e.g., if you time is in seconds:
... | bucket time span=10 | top time