Splunk Search

Perform an operation on values in the column of a lookup table that share the same row values

matthewob5
Engager

I have a lookup table that looks like this (:

Column 1Column 2Column 3Column 4
Value 1--15
Value 1--60
Value 2--75
Value 2--N/A
Value 2--5

 

I want to calculate the average for all of the values in Column 4 (that aren't N/A) that have the same value in Column 1. Then I want to output that as a table:

Column 1Column 2
Value 137.5
Value 240
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The stats command can do that, although I'm not sure how it will handle "N/A".

| stats avg('Column 4') as "Column 2" by 'Column 1'

 

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

Get ready to show some Splunk Certification swagger at .conf24!

Dive into the deep end of data by earning a Splunk Certification at .conf24. We're enticing you again this ...

Built-in Service Level Objectives Management to Bridge the Gap Between Service & ...

Now On-Demand Join us to learn more about how you can leverage Service Level Objectives (SLOs) and the new ...

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...