How do I create a search that will show the average call durations for each of the three locations below?
Where AVG_DURATION for “California” = 200000+6000/2
Where AVG_DURATION for “Colorado” = 1100+6000/2
Where AVG_DURATION for “Texas” =5400+9000+300000/3
Egress_Remote_Signaling_Device - Call_Duration
California - 200000
California - 6000
Colorado 1100
Colorado - 6000
Texas - 5400
Texas - 9000
Texas - 300000
mysearch | stats avg(Call_Duration) by Egress_Remote_Signaling_Device
?
That assumes Splunk is actually returning the field names you have listed. Replace "mysearch" with whatever search returns the list you gave above.
mysearch | stats avg(Call_Duration) by Egress_Remote_Signaling_Device
?
That assumes Splunk is actually returning the field names you have listed. Replace "mysearch" with whatever search returns the list you gave above.
Thanks Rich!