When mean & avg are both present on a "stats" search, the first one in order will be missing so: | makeresults count=100 | eval Value=random() % 100 | Stats count(Value) AS Count avg(Value) AS Avg mean(Value) AS Mean results in: Count Avg Mean 100 49.49 While | makeresults count=100 | eval Value=random() % 100 | Stats count(Value) AS Count mean(Value) AS Mean avg(Value) AS Avg results in: Count Mean Avg 100 43.78 So why is one of the values missing? John W.
... View more