https://community.splunk.com/t5/Splunk-Search/Using-timewarp-to-compare-average-of-last-30-days-to-current-24/m-p/557919#M158458 <P>I have a data set&nbsp; of events with ID numbers (every time an event happens an entry is made in the table and each type of event has an ID)&nbsp; from which, I'm getting the count by ID number. I need to take the average of daily counts from the last 30 days and compare it to the current 24 hour count. I have a feeling timewarp could be useful for this but not sure how, any suggestions?</P> Wed, 30 Jun 2021 21:14:22 GMT maingirl 2021-06-30T21:14:22Z https://community.splunk.com/t5/Splunk-Search/Using-timewarp-to-compare-average-of-last-30-days-to-current-24/m-p/557919#M158458 <P>I have a data set&nbsp; of events with ID numbers (every time an event happens an entry is made in the table and each type of event has an ID)&nbsp; from which, I'm getting the count by ID number. I need to take the average of daily counts from the last 30 days and compare it to the current 24 hour count. I have a feeling timewarp could be useful for this but not sure how, any suggestions?</P> Wed, 30 Jun 2021 21:14:22 GMT https://community.splunk.com/t5/Splunk-Search/Using-timewarp-to-compare-average-of-last-30-days-to-current-24/m-p/557919#M158458 maingirl 2021-06-30T21:14:22Z