Aggregate Query Functions

Humio's aggregate query functions take a set of events, parameters, or configurations; and produce, reduce, or modify values within that set, or within the events themselves within the query pipeline.

avg()Calculates the average for a field of a set of events.
bucket()Extends the groupBy function for grouping by time.
callFunction()Calls the named function on a field over a set of events.
collect()Collects fields from multiple events into one event.
count()Counts given events.
counterAsRate()Calculates the rate for a counter field.
groupBy()Groups events by specified fields and executes aggregate functions on each group.
head()Returns the oldest events.
holtwinters()Used to generate a trendline for a periodic dataset.
linReg()Computes linear relationship model between two variables using least-squares fitting.
selectFromMax()Selects event with highest value for specified field
selectFromMin()Selects event with lowest value for specified field
selectLast()Specify fields to select from events, keeping value of most recent event for each field.
series()Collects a series of values for selected fields from multiple events into one or more events.
sort()Sorts events by their fields.
sum()Calculates the sum for a field over a set of events.
top()Finds the top results based on a given field.
window()Computes aggregate functions over a sliding window of data.

Table: Array Query Functions