Splunk Search

Using AVG function with count

jsights
New Member

I'm a brand new Splunk user, so I apologize if this is an extremely basic question. This is the query I'm running:

loggingAppId=ABC loggingOperationName=Operation.Name loggingMethodName=Logging.Method | timechart count by loggingAppId

This is functioning as expected. However, I would like to get the average of the results. i.e. If I run this for a 30 day time span, I'd like the average of those 30 days. Here's an example of a query I've attempted unsuccessfully to get this:

loggingAppId=ABC loggingOperationName=Operation.Name loggingMethodName=Logging.Method | stats avg count by loggingAppId

I'd greatly appreciate if someone could tell me what I'm doing wrong. Thanks a lot from a newbie!

Tags (1)
0 Karma

pradeepkumarg
Influencer
loggingAppId=ABC loggingOperationName=Operation.Name loggingMethodName=Logging.Method  | timechart span=1d count by loggingAppId | stats avg(count) by loggingAppId 
0 Karma
Get Updates on the Splunk Community!

Community Content Calendar, November Edition

Welcome to the November edition of our Community Spotlight! Each month, we dive into the Splunk Community to ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...