Splunk Search

how to combine/merge multiple generic fields/columns in one field/column with average calculation per generic field/column values in Splunk?

AlexHoller
New Member

hi,

I have following situation in splunk (see picture below).
Actual Situation

I need following pattern in Splunk (see picture below).
Target Solution

I have different generic columns where the last part of the column-name (Suffix) is dynamic and unknown. I need to combine/merge this generic columns to one target-column. Within the target-column I want to calculate the average per generic field. I think the picture explains the situation very well.

0 Karma

whrg
Motivator

Do you have a fixed number of suffixes? That is, are there only SuffixA, SuffixB and SuffixC?

0 Karma
Get Updates on the Splunk Community!

What's New in Splunk Observability - October 2025

What’s New?    We’re excited to announce the latest enhancements to Splunk Observability Cloud and share ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...