I want to get a average of the indexing latency time by host.
index = ili_imaging_index| eval latency =_time - _indextime| table avg(latency) by host
This is returning useless stuff. This seems so simple!!
this works
index = ili_imaging_index| eval latency =_time - _indextime| stats sum(latency) by host
View solution in original post