> That caused us to dig a bit deeper and see that the two peaks represented logged-out and logged-in users. This is extremely common and one of the core ideas

> That caused us to dig a bit deeper and see that the two peaks represented logged-out and logged-in users. This is extremely common and one of the core ideas of statistical process control[1]. Sometimes you have just the one process generating values that are sort of similarly distributed. That's a nice situation because it lets you use all sorts of statistical tools for planning, inferences, etc. Then frequently what you have is really two or more interleaved processes masquerading as one. These distributions generate values that within each are sort of similarly distributed, but any analysis you do on the aggregate is going to be confused. Knowing the major components of the pretend-single process you're looking at puts you ahead of your competition -- always. [1]: https://two-wrongs.com/statistical-process-control-a-practitioners-guide.html https://two-wrongs.com/statistical-process-control-a-practit...