Daily Average Count from the past 7 day period

[jthomasc]

Current query,  this shows the how many successful login attempts there have been.

index=abc granttype=mobile
| fields subjectid, message | search message="*Token Success*"
| stats count

I am now looking to create a panel to show the daily average amount of successful login attempts across 7 days. Is anyone able to help me with  query please? 

[gcusello]

Hi @jthomasc ,

at first, put all the search terms in the main search to have more performant searches.

then you have to use the timechart command, something like this:

index=abc granttype=mobile message="*Token Success*"
| timechart span=1d avt(count) AS avg

Ciao.

Giuseppe

[jthomasc]

Thanks for your speedy response and for helping me out @gcusello . Unfortunately, the average does not seem to return for this, any idea why? 

I'm essentially trying to get a Status Indicator Panel for this stat, like shown below.