I am trying to make a table visualization that shows the 30-day averages of the daily averages of log volume (count) per per log source split by type.
If I have 10 log sources, half are firewalls, and half are windows hosts. Firewalls send logs that are of type “firewall”, and windows hosts send logs of type “wineventlog”.
I am trying to see what the 30-day average of the daily average document count is per host split by type.
I cannot seem to get the kibana table visualization quite right for this. Does anyone know how to do this calculation?