Hi All,
I would like to get the average for Failed_Attempts and Passed_Authentications of the below table,
_time Failed_Attempts Passed_Authentications
2017-10-09 12345 28800
2017-10-10 22189 47452
2017-10-11 19697 50204
2017-10-12 4124 12054
Please suggest the query !!
see the documentation on the stats command
http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Stats
<mysearch >| stats avg(Failed_Attempts) avg(Passed_Authentications)
I'm leaving this one for the young splunks.