Splunk Search
Highlighted

Error: Trendline command: invalid Trendline period for 'sma(count)'

Splunk Employee
Splunk Employee

I am running the following search in the Splunk Search GUI:

* daysago=30  |timechart count| trendline sma(count)as thecount

and I am receiving an error in red that says the trendline has an invalid trendline period for argument 'sma(count)'

Does anyone know what this means and, hopefully, how to correct?

0 Karma
Highlighted

Re: Error: Trendline command: invalid Trendline period for 'sma(count)'

Shouldn't that be

sma5(count) 

with 5 (or other) being the window used for the average?