Calculates the standard deviation for a field over a set of events. The result is returned in a field named _stddev
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscale SyntaxstdDev("value")
and:
logscale SyntaxstdDev(field="value")
These examples show basic structure only.
stdDev()
Examples
Find the standard deviation of bytes send in http responses
logscale
stdDevBytes := stdDev(field=bytes_sent)