I'd like to compare a chart of this week's activity to a specific, never changing baseline week.
I would determine which week is the perfect representative week of normal behaviour, say Feb 08 to Feb 14 2016, and then always compare current activity to that one.
I read the following but that does not let me input static date, and if I understand it correctly I whould have to consider everything from feb 08 to today, and get rid of everything inbetween, which does not make a lot of sense.
https://answers.splunk.com/answers/297910/how-to-compare-data-for-specified-absolute-dates-u.html?utm_source=typeahead&utm_medium=newquestion&utm_campaign=no_votes_sort_relev
Any ideas?
↧