Splunk Search

Sum and average of values present in two columns of an output

yashwanth_g_pra
Observer

Hi All,

I would like to get the average for Failed_Attempts and Passed_Authentications of the below table,

_time Failed_Attempts Passed_Authentications
2017-10-09 12345 28800
2017-10-10 22189 47452
2017-10-11 19697 50204
2017-10-12 4124 12054

Please suggest the query !!

Tags (1)
0 Karma

yannK
Splunk Employee
Splunk Employee

see the documentation on the stats command
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Stats

 <mysearch >| stats avg(Failed_Attempts) avg(Passed_Authentications)
0 Karma

DalJeanis
Legend

I'm leaving this one for the young splunks.

0 Karma
Get Updates on the Splunk Community!

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...