ES|QL IRATE function
field- the metric field to calculate the value for
window-
the time window over which to compute the irate
Calculates the irate of a counter field. irate is the per-second rate of increase between the last two data points (it ignores all but the last two data points in each time period). This function is very similar to rate, but is more responsive to recent changes in the rate of increase.
| field | window | result |
|---|---|---|
| counter_double | time_duration
|
double |
| counter_integer | time_duration
|
double |
| counter_long | time_duration
|
double |
TS k8s | WHERE pod == "one"
| STATS irate_bytes_in = SUM(IRATE(network.total_bytes_in)) BY cluster, time_bucket = TBUCKET(10minute)
| irate_bytes_in:double | cluster:keyword | time_bucket:datetime |
|---|---|---|
| 0.07692307692307693 | prod | 2024-05-10T00:00:00.000Z |
| 830.0 | qa | 2024-05-10T00:00:00.000Z |
| 31.375 | staging | 2024-05-10T00:00:00.000Z |
| 9.854545454545454 | prod | 2024-05-10T00:10:00.000Z |
| 18.700000000000003 | qa | 2024-05-10T00:10:00.000Z |