Aggregate Query Functions
Humio's aggregate query functions take a set of events, parameters, or configurations; and produce, reduce, or modify values within that set, or within the events themselves within the query pipeline.
| Function | Description |
|---|---|
avg() | Calculates the average for a field of a set of events. |
bucket() | Extends the groupBy function for grouping by time. |
callFunction() | Calls the named function on a field over a set of events. |
collect() | Collects fields from multiple events into one event. |
count() | Counts given events. |
counterAsRate() | Calculates the rate for a counter field. |
groupBy() | Groups events by specified fields and executes aggregate functions on each group. |
head() | Returns the oldest events. |
holtwinters() | Used to generate a trendline for a periodic dataset. |
linReg() | Computes linear relationship model between two variables using least-squares fitting. |
selectFromMax() | Selects event with highest value for specified field |
selectFromMin() | Selects event with lowest value for specified field |
selectLast() | Specify fields to select from events, keeping value of most recent event for each field. |
series() | Collects a series of values for selected fields from multiple events into one or more events. |
sort() | Sorts events by their fields. |
sum() | Calculates the sum for a field over a set of events. |
top() | Finds the top results based on a given field. |
window() | Computes aggregate functions over a sliding window of data. |
Table: Array Query Functions