stats
Table of Contents
| This command is experimental |
Definition
stats calculates statistics for the incoming search results and creates columnar data ready for a graph display.
Optional arguments for stats:
Examples
Use stats command with aggregation functions.
%dpl
index=example earliest=01/01/2021:08:00:00
| stats avg(_raw)
allnum
allnum calculates numerical statistics for each table column if values are numerical. The argument takes boolean value. By default, the value is false.
|
Currently, |
by
by groups results by one or more table columns. You can’t use wildcard with by argument, but instead you need to specify separately all table columns you want results to be grouped by.
If by argument isn’t used, only one table row will be returned.
%dpl
index=crud_small earliest=01/01/2021:08:00:00
| spath path=operation
| spath path=success
| stats count by success operation