Splunk Search

how to combine/merge multiple generic fields/columns in one field/column with average calculation per generic field/column values in Splunk?

AlexHoller
New Member

hi,

I have following situation in splunk (see picture below).
Actual Situation

I need following pattern in Splunk (see picture below).
Target Solution

I have different generic columns where the last part of the column-name (Suffix) is dynamic and unknown. I need to combine/merge this generic columns to one target-column. Within the target-column I want to calculate the average per generic field. I think the picture explains the situation very well.

0 Karma

whrg
Motivator

Do you have a fixed number of suffixes? That is, are there only SuffixA, SuffixB and SuffixC?

0 Karma
Get Updates on the Splunk Community!

Observability Unlocked: Kubernetes Monitoring with Splunk Observability Cloud

 Ready to master Kubernetes and cloud monitoring like the pros? Join Splunk’s Growth Engineering team for an ...

Update Your SOAR Apps for Python 3.13: What Community Developers Need to Know

To Community SOAR App Developers - we're reaching out with an important update regarding Python 3.9's ...

October Community Champions: A Shoutout to Our Contributors!

As October comes to a close, we want to take a moment to celebrate the people who make the Splunk Community ...