Hi, I would like to get the average of multiple fields in the same row but not all, would anyone be able to advise on this? query | chart latest(time_taken) by process server # Results Process Local-1 Local-2 Avg(Local) Remote-1 Remote-2 A 1 2 1.5 2 2 B 1 3 2 3 3 I would like to add an Avg(Local) field which gives me the average time taken by the processes running on Local-1 and Local-2. Appreciate any suggestions, thanks!   ... View more

query | bin _time span=30m | chart avg(throughput) by _time server Hi, I want only the avg(throughput) by _time server values that exceed a certain number to be shown. I tried multiple different ways and came up with broken queries/queries that return empty results like the following: # broken query | where avg(throughput) by _time server > 80 # no results found | search avg(throughput) by _time server > 80 # broken query | rename avg(throughput) by _time server as avgthroughput | where avgthroughput > 80 Would appreciate suggestions! Thank you. P.S. Splunk beginner ... View more

Hi, is it possible for a checkbox with search on change enabled to only refresh one panel in a dashboard with multiple panels? Only that panel is using the input from the checkbox, so there's no need for all other panels to be refreshed when there are changes made to it.  ... View more