stdDev( ) Query Function

Calculates the standard deviation for a field over a set of events. Result is returned in field named _stddev


Name Type Required Default Description
field string Yes field to extract a number from and calculate standard deviation over
as string No _stddev name of output field

field is the unnamed parameter.


Find the standard deviation of bytes send in http responses

stdDevBytes := stdDev(field=bytes_sent)