trendline won't display

[nikmeiser]

I have a simple trendline to track storage growth I want to display. I'm using the following syntax. There are no errors but the trendline won't display -

tag="host01" | eval MOUNTPT=mvfilter(match(MOUNTPT, "^/d/")) | eval USEDGB=round(X_USED/(1024*1024),2) | timechart max(USEDGB) | trendline sma5(USEDGB) as trend

Any ideas what I'm doing wrong?

[nikmeiser · Accepted solution]

Figured it out. It needed a function around the field. This works -

tag="host01" | eval MOUNTPT=mvfilter(match(MOUNTPT, "^/d/")) | eval USEDGB=round(X_USED/(1024*1024),2) | timechart max(USEDGB) | trendline sma5(max(USEDGB)) as trend