How do you add another column that contains averages based on previous columns after "chart count over Level by Month"?
Level Month1 Month2 Month3 Average
1 2 3 4 3
2 4 5 6 5
3 4 6 8 6
....
@cfstoica,
If the number of months are dynamic, then give this a try,
chart count over Level by Month|addtotals|eval Total=Total-Level|eval colcount=-3
|foreach * [eval colcount=colcount+1]|eval Average=Total/colcount|fields - Total,colcount
Is it always the same columns? You could do something like the following if so:
... | eval avgbylevel=(Month1 + Month2 + Month3)/3 | table Level Month1 Month2 Month3 avgbylevel