I need to extract value pairs from a field (string=integer) and then calculate the average of each of the strings.
The field in question looks like this
… [T=76ms,Rquest1=1, Request2=70, Request3=100, Request10=7]
… [T=134ms,Rquest1=11, Request7=700, Request8=1]
The query I am using looks something like this
<filters such as earliest=-1m> | makemv tokenizer="(.+?)(?=,|$),?" views | rex field=filtered_views "(?<int_call>.*)=(?<int_time>.*)" | table T, int_call, int_time
That gives me the output on the attached image
I want the average of Rquest1, Request2, Request3, etc.
The content comes from an app server log and the strings are calls to inner processes that happen for a particular request. That means that the strings can vary and there is not a comprehensive, stable list of values I can use to match as suggested on Question 6966 or Question 45993
Note that I can remove T to simplify the request, but the values on int_call and int_time will remain as groups, not as individual fields
Thank you in advance. This is eating my brain out.
... View more