Build aggregation on top of doc_count of date histogram?

I want to implement Control Chart as it described here:, but I do not have metrics — I have events with timestamps.

So my idea was to make the date histogram, and then use resulting doc_count as source for moving averages as described in a blog post. But I cannot figure out how to do it.

Is it possible? Thank you!

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.