Dashboards & Visualizations

headache stats by fields name and values

gduc
Observer

Hi Splunkers;

I'm trying to create a table but can't and don't understand how to do...

I'd like to calculate stats avg, max and exactperc90 on 8 fields values adding a by 2 other fields values.

my problem is to use as a field value his own field name.

I'm not shure my explains are clear, tried to draw it.

stats_by.png

any one have done this before?

Thanks a lot for support.

Labels (1)
0 Karma

gduc
Observer

Thanks for your answer.

but not what i need.

what i need is the request for:

-the 1st and 2nd columns are "| stats by" u_ci_name and component_value

-the 3rd column is a list of "fields names" caled "traffic*" by u_ci_name and component_value

-the lasts columns are avg/max/perc by u_ci_name and component_value and fields names

 

hope you see what i mean.

thanks a lot.

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

You can rename fields in the stats command e.g.

| stats avg(count) as Average

Or use the rename command

| rename Avg as Average

 

Get Updates on the Splunk Community!

Index This | I’m short for "configuration file.” What am I?

May 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with a Special ...

New Articles from Academic Learning Partners, Help Expand Lantern’s Use Case Library, ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Your Guide to SPL2 at .conf24!

So, you’re headed to .conf24? You’re in for a good time. Las Vegas weather is just *chef’s kiss* beautiful in ...