Splunk Search

How do I create a search that will show the average call durations for each of the three locations below?

vstevenson
New Member

How do I create a search that will show the average call durations for each of the three locations below?
Where AVG_DURATION for “California” = 200000+6000/2
Where AVG_DURATION for “Colorado” = 1100+6000/2
Where AVG_DURATION for “Texas” =5400+9000+300000/3

Egress_Remote_Signaling_Device - Call_Duration
California - 200000
California - 6000
Colorado 1100
Colorado - 6000
Texas - 5400
Texas - 9000
Texas - 300000

Tags (2)
0 Karma
1 Solution

Richfez
SplunkTrust
SplunkTrust

mysearch | stats avg(Call_Duration) by Egress_Remote_Signaling_Device ?

That assumes Splunk is actually returning the field names you have listed. Replace "mysearch" with whatever search returns the list you gave above.

View solution in original post

Richfez
SplunkTrust
SplunkTrust

mysearch | stats avg(Call_Duration) by Egress_Remote_Signaling_Device ?

That assumes Splunk is actually returning the field names you have listed. Replace "mysearch" with whatever search returns the list you gave above.

vstevenson
New Member

Thanks Rich!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...