Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Can I use an average in maps+ instead of count?

$
0
0
While using maps+ the clusters it makes show count of events in it. How can i use average of the values for a particular kpi? Like when it shows cluster count can I display average of a KPI like I am able to do on custom cluster maps ![alt text][1] [1]: /storage/temp/256000-capture.png AS the picture shows counts like 273, I want average of a percentage displayed here. Is that at all possible. Please help, I need this done quickly. Currently I am doing the same thing using Custom Cluster Maps basesearch|eval kpi=A+B |geostats latfield=latitude lonfield=longitude avg(kpi) This gives me the desired result where geogriphical clusters are made with average of KPI for all the items in the cluster displayed on top. But map+ has better detailing, so I wanted to use that. Is there a way I can get a similar average there instead of count of items in the cluster?

Viewing all articles
Browse latest Browse all 47296

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>