How to Display Trend Indicator for Single Values and Displaying the Average

[aditsss]

Hi All,

I have one requirement .

Below is my query :

index="abc" sourcetype="xyz" id="*-develop--system" (OrgFolderName ="gcp") bugs="*" | table bugs _time| sort _time

bugs               | _time
1110                     2021-01-11 13:11:04
2301                       2021-01-12 13:12:52
4556                      2021-01-13 13:09:32
1009                       2021-01-14 13:10:31
3214                    2021-01-15 13:11:12
5005                       2021-01-16 13:09:23
3009                         2021-01-17 13:09:58

My requirement is I want to display the the data in single value format with trend Indicator.
Suppose I select yesterday so it should show 3009 as the value.

Now suppose I select last 7 days so it should show the average of bugs in single value and trend Indicator for first value and last value.

Can someone guide me what changes I need to make in my query.

[scelikok]

Hi @aditsss,

Single value visualization cannot show trend based on a field other than the displayed one. If you want to show average value, trend will be shown based on this value. It is not possible to show average while calculating the trend based on first and last values.

If this reply helps you an upvote is appreciated.

[aditsss]

Can someone please guide me on this.