I have a splunk query that gives me the average, max and percentile 95 per day of a field. I would like to add one more row on the results with the overall values.
ie
timechart span=1d avg(field), max(field), exactperc95(field)
and also
stats avg(field), max(field), exactperc95(field)
_time | avg | max | p95 |
---|---|---|---|
2020-01-23 | 1.5 | 5 | 4 |
2020-01-24 | 1.2 | 8 | 7 |
2020-01-25 | 1.4 | 5 | 4 |
2020-01-26 | 1.1 | 7 | 6 |
overall | 1.3 | 8 | 6 |