My initial log looks something like: The quick brown fox jumps over the lazy dog, and it jumped in 23092 seconds. Trying to extract the number value and get an average. I have a query which extracts the 14th value, essentially a time field. This query works, but I am trying to get an average of the times per host. | rex field=_raw "(\S+\s+){13}(?<processTime>\S+)\s" | stats count by processTime, host processTime host 23092 host123 45098 host088 98987 host238 23092 host123 23092 host123 98656 host088 54545 host238 I need an average for host123, host088, host238 The above query is also grouping the same times and displaying the counts, which is not preferred.
... View more