Splunk Search

how to combine/merge multiple generic fields/columns in one field/column with average calculation per generic field/column values in Splunk?

AlexHoller
New Member

hi,

I have following situation in splunk (see picture below).
Actual Situation

I need following pattern in Splunk (see picture below).
Target Solution

I have different generic columns where the last part of the column-name (Suffix) is dynamic and unknown. I need to combine/merge this generic columns to one target-column. Within the target-column I want to calculate the average per generic field. I think the picture explains the situation very well.

0 Karma

whrg
Motivator

Do you have a fixed number of suffixes? That is, are there only SuffixA, SuffixB and SuffixC?

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...