Splunk Search

Error: Trendline command: invalid Trendline period for 'sma(count)'

maverick
Splunk Employee
Splunk Employee

I am running the following search in the Splunk Search GUI:

* daysago=30  |timechart count| trendline sma(count)as thecount

and I am receiving an error in red that says the trendline has an invalid trendline period for argument 'sma(count)'

Does anyone know what this means and, hopefully, how to correct?

0 Karma

Paolo_Prigione
Builder

Shouldn't that be

sma5(count) 

with 5 (or other) being the window used for the average?

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...