I am on Day 2 with Splunk. I am trying to get the average number of records by Day of the Week (Mon, Tue, Wed, etc) of the specified timespan. I can get the total counts by Day of the Week, but I can't seem to get the average number of transactions per Day of the Week. This gets me the total number of transactions for each day of the week in that timespan: index=xxxxxxxxxxxxx | eval day=strftime(_time,"%a") | stats count by day How do I get this to average out so that if I have 1000 records for Mondays and I have 4 Mondays in that timespan then I get the value to be 250? I found this post from 2014, but I can't get that to work: https://community.splunk.com/t5/Splunk-Search/day-of-the-week-average/m-p/142904
... View more