I'm searching an index that contains time sheet data. Each event is a charge by an employee of some number of hours (hours_charged) against a project. I used the following to get a table of total hours by project per month
index=XXX | ... | timechart span=1month sum(hours_charged) by project_name
This produces a table like the following.
_time ProjectA ProjectB ProjectC ProjectD
2013-07 12.3 45.6 78.9 12.3
2013-08 12.7 44.1 77.1 13.2
...
This is useful information but what I'm really after is the average of the monthly project hours. So I'm looking for a way to generate an average of the project columns in the timechart. Ideally the result would look like the following.
_time AvgHoursPerProject
2013-07 37.3
2012-08 36.8
Is there a way to do this?
Thanks,
Doug
... View more