Calculates the standard deviation for a field over a set of events. The result is returned in a field named _stddev
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscalestdDev("field")
and:
logscalestdDev(field="field")
These examples show basic structure only; full examples are provided below.
stdDev()
Examples
Find the standard deviation of bytes send in http responses
logscale
stdDevBytes := stdDev(field=bytes_sent)