ES|QL STDDEV_OVER_TIME function
field- the metric field to calculate the standard deviation for
window-
the time window over which to compute the standard deviation over time
Calculates the population standard deviation over time of a numeric field.
| field | window | result |
|---|---|---|
| double | time_duration
|
double |
| integer | time_duration
|
double |
| long | time_duration
|
double |
TS k8s
| STATS max_stddev_cost=MAX(STDDEV_OVER_TIME(network.cost)) BY cluster, time_bucket = TBUCKET(1minute)
| cluster:keyword | time_bucket:datetime | max_stddev_cost:double |
|---|---|---|
| staging | 2024-05-10T00:03:00.000Z | 5.4375 |
| staging | 2024-05-10T00:09:00.000Z | 5.1875 |
| qa | 2024-05-10T00:18:00.000Z | 4.097764 |
| qa | 2024-05-10T00:21:00.000Z | 4.0 |
| staging | 2024-05-10T00:20:00.000Z | 3.9375 |