Splunk Search

Sum and average of values present in two columns of an output

yashwanth_g_pra
Observer

Hi All,

I would like to get the average for Failed_Attempts and Passed_Authentications of the below table,

_time Failed_Attempts Passed_Authentications
2017-10-09 12345 28800
2017-10-10 22189 47452
2017-10-11 19697 50204
2017-10-12 4124 12054

Please suggest the query !!

Tags (1)
0 Karma

yannK
Splunk Employee
Splunk Employee

see the documentation on the stats command
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Stats

 <mysearch >| stats avg(Failed_Attempts) avg(Passed_Authentications)
0 Karma

DalJeanis
SplunkTrust
SplunkTrust

I'm leaving this one for the young splunks.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...