Build aggregation on top of doc_count of date histogram?

Hello!
I want to implement Control Chart as it described here: https://www.elastic.co/blog/staying-in-control-with-moving-averages-part-2, but I do not have metrics — I have events with timestamps.

So my idea was to make the date histogram, and then use resulting doc_count as source for moving averages as described in a blog post. But I cannot figure out how to do it.

Is it possible? Thank you!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.