gistfile1.txt

earliest=-4h index=\"ittools\" NAME=\"cactilog\" Time:
| rex \"Time:(?<polltime>[\\d\\.]+)\"
| trendline sma30(polltime) as smoothed_polltime
| eval timelimit=52
| timechart avg(polltime) max(polltime) avg(smoothed_polltime) avg(timelimit)