eval returns a field rather than a scalar

[riley_lewis]

When I do this search:

index="mydata" | eval mymean=avg(floatnumbers) | table floatnumbers,mymean

mymean just mimics whatever is in floatnumbers. How do I calculate the mean? I have tried the fieldsummary command, but when I did that, it would not port to chart correctly.

[gcusello]

Hi @riley_lewis,

the avg function must be used in a streaming command as stats or timechart:

index="mydata" 
| stats avg(floatnumbers) AS floatnumbers BY mymean

Ciao.

Giuseppe