We have this as time series data, which is why I use unique counts and I'm limiting my range filter to previous month.
My goal is to do a same version of this, where the count column would display the difference in counts of licenses from 2 months ago vs 1 month ago, to show either an increase, decrease or no change in number of license consumption, per license type.
Can Kibana support this? I've attempted to use a formula for my metric doing something like unique_count(primaryEmail.keyword, shift="2M") - unique_count(primaryEmail.keyword, shift="1M"), but then it complains about my Microsoft License row and tells me to use a filter, at which point adding licenses.keyword : * simply displays something like this rather than continuing to enumerate the license types.
Do you have a breakdown? Because in that case we don't allow cacuations on metrics with different shifts. The reason is that at that case you have different top values per shift so it doesnt make sense.
Thank you. I'm not sure what you mean by a breakdown? What I'm trying to accomplish is to show each license types and the difference in number of counts over the months, but adding a filter doesn't seem to work. If this isn't possible then that's fine, I just don't know what I don't know