How to display a trendline for distinct count of a field

[jbrenner]

I want to add a trendline to this chart:

index=my_index
| timechart dc(USER) as DISTINCT_USERS

How do I accomplish this?

Thanks!

Jonathan

[livehybrid]

Hi

Add the trendline command after your timechart:

index=my_index
| timechart dc(USER) as DISTINCT_USERS
| trendline sma5(DISTINCT_USERS) as trend_DISTINCT_USERS

This adds a 5-point simple moving average trendline.

Adjust the window size (e.g., sma7, sma10) as needed.

Trendline documentation

🌟Did this answer help you? If so, please consider:

• Adding karma to show it was useful
• Marking it as the solution if it resolved your issue
• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing