Training + Certification

Can you help me with with Module 9, Task 6 in Splunk training and certification Fundamentals 1 course?

New Member

For some reason the Parenthesis on avg(Duration) won't work.

I have entered the answer "index=main sourcetype=db_audit | stats avg(Duration)" but when I enter it, I get an additional set of parenthesis

0 Karma


I don't know if this is the paren problem, but Splunk is sensitive to spaces.

For example

index=_internal avg_age=* |  stats avg(avg_age)

If I put a space after avg I get an error

index=_internal avg_age=* |  stats avg (avg_age)

Error in 'stats' command: The argument '(avg_age)' is invalid.

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!


Or Learn More in Our Blog >>