Not sure what the issue is here. stats avg will compute the average of the values found in each event and give you an unrounded result. stats avg(eval(round(val, 0))) will round the value before giving it to the avg() aggregation. so if you have three events with values 3.3, 3.4 and 4.4, then it will take the average of 3+3+4 (10), which will give you 3.33333333 - again, an unrounded result. | makeresults
| eval value = split("3.3,3.4,4.4", ",")
| mvexpand value
| eventstats avg(eval(round(value, 0))) as avg
| stats avg(value) as v values(avg) as avg
| eval r_v=round(v), r_avg=round(avg) If you want to get a rounded value from your average, the round after the stats, as in the accepted solution, i.e. Can you clarify what you mean by defeating the purpose @mal11 wrote: eval needs to go after stats operation which defeats the purpose of a the average.
... View more