Hello Sir, I am trying to fetch count of errors in application logs on daily basis and average count of errors in past 7 days. I tried using the following: - index=** <Search condition> |stats count by error |streamstats avg(count) I get three columns: error, count, avg(count). I am able to follow the results obtained in first two columns, but unable to understand how the values are getting calculated and displayed for avg(count). Thus, need your help to comprehend the same. Thank you
... View more