Synopsis
Calculates the average of the values in a specified column in the search query results.
Syntax
avg [column_name]
Required Arguments
column_name
Syntax: <character string>
Description: The name of a column header that has numeric values
Optional Arguments
None
Description
For each event in the search query results that has the specified column_name with a numeric value, adds the value to the cumulative sum, and when it has reached the last event, divides the cumulative sum by the number of events to get the average.
Examples
Example 1:
* in log.access | avg Bytes Sent
From the events in access log, returns the average of the values in column Bytes Sent.