Hi! Here is a search for you to calculate day1Average, day2Average, day3Average etc.:
... | rex field=Date "(?<Month>\d+)/(?<Day>\d+)/(?<Year>\d+)"
| stats count as Count by Year,Month,Day | sort Year,Month,Day
| eventstats last(Month) as Current_Month last(Year) as Current_Year | where Month!=Current_Month OR Year!=Current_Year
| stats avg(Count) as DayAverage values(Month) as Months by Day
This will give you:
Day DayAverage Months
1 3.5 8,9
2 3.5 8,9
To get day1Actual and day2Actual you would need to replace the where clause with:
| where Month=Current_Month AND Year=Current_Year
... View more