I want to implement Control Chart as it described here: https://www.elastic.co/blog/staying-in-control-with-moving-averages-part-2, but I do not have metrics — I have events with timestamps.
So my idea was to make the date histogram, and then use resulting doc_count as source for moving averages as described in a blog post. But I cannot figure out how to do it.
Is it possible? Thank you!