Calculates the standard deviation for a field over a set of events. The result is returned in a field named _stddev

ParameterTypeRequiredDefaultDescription
asstringoptional[a]_stddev Name of output field.
field[b]stringrequired  Field to extract a number from and calculate standard deviation over.

[a] Optional parameters use their default value unless explicitly set

[b] The argument name field can be omitted.

Omitted Argument Names

The argument name for field can be omitted; the following forms of this function are equivalent:

logscale
stdDev("value")

and:

logscale
stdDev(field="value")

stdDev() Examples

Find the standard deviation of bytes send in http responses

logscale
stdDevBytes := stdDev(field=bytes_sent)