Make sure that one of your filter criteria is:
Definition is Incident State Duration
That will only give you metrics associated with when the state changes.
Also, make sure you have the duration filter [Duration(mi_duration) greater than 0] in there also, or else your calculations will be skewed way down because the duration associated with the closed state will always be zero, since that state never changes.
Hope this helps,
--Dennis R
