On This Page

Home / Search/ Language Reference/ Functions/Statistical Functions

Statistical Functions

Statistical functions are used together with the summarize, eventstats, and timestats operators to aggregate your data. Cribl Search supports the following statistical functions:

NameDescription
avgCalculates the average across the group.
avgifCalculates the average across the group where a predicate evaluates to true.
countCounts events per summarization group.
countifCounts events based on a predicate.
dcountCalculates an estimate of the number of distinct values.
dcountifCalculates an estimate of the number of distinct values for those rows where a predicate evaluates to true.
maxFinds the maximum value across the group.
maxifFinds the maximum value for which a predicate evaluates to true.
minFinds the minimum value across the group.
minifFinds the minimum value which a predicate evaluates to true.
percentileReturns an estimate for the specified nearest-rank percentile of the population defined.
stdevCalculates the standard deviation of an expression across the group.
stdevifCalculates the standard deviation of an expression which a predicate evaluates to true.
stdevpCalculates the standard deviation of an expression across the group, considering the group as a population.
sumCalculates the sum of an expression across the group.
sumifCalculates the sum of an expression for which a predicate evaluates to true.
varianceCalculates the variance of an expression.
varianceifCalculates the variance of an expression for which a predicate evaluates to true.
variancepCalculates the variance of an expression across the group, considering the group as a population.