https://community.splunk.com/t5/Splunk-Search/How-to-calculate-moving-standard-deviation-in-Splunk/m-p/344830#M102162 <P>refer this, you will get some idea.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/7.0.2/Search/Findingandremovingoutliers">http://docs.splunk.com/Documentation/Splunk/7.0.2/Search/Findingandremovingoutliers</A></P> Sat, 10 Mar 2018 12:46:31 GMT anjambha 2018-03-10T12:46:31Z https://community.splunk.com/t5/Splunk-Search/How-to-calculate-moving-standard-deviation-in-Splunk/m-p/344828#M102160 <P>_time, Prev Week(count),Prev 2 week(count),avg,3*Std Dev,Current count,Delta,RAG<BR /> 1:30 8 7 7.5 2.121320344 8 0.5 OK<BR /> 2:00 9 9 9 0 5 4 Alert<BR /> 2:30 10 11 10.5 2.121320344 11 0.5 OK<BR /> 3:00 11 10 10.5 2.121320344 8 2.5 Alert<BR /> 3:30 12 12 12 0 7 5 Alert<BR /> 4:00 12 12 12 0 10 2 Alert<BR /> 4:30 13 14 13.5 2.121320344 8 5.5 Alert<BR /> 5:00 13 13 13 0 8 5 Alert<BR /> 5:30 14 13 13.5 2.121320344 7 6.5 Alert</P> Sat, 10 Mar 2018 06:16:45 GMT https://community.splunk.com/t5/Splunk-Search/How-to-calculate-moving-standard-deviation-in-Splunk/m-p/344828#M102160 payal23 2018-03-10T06:16:45Z https://community.splunk.com/t5/Splunk-Search/How-to-calculate-moving-standard-deviation-in-Splunk/m-p/344829#M102161 <P>Streamstats lets you calculate many statistical functions over any window: <A href="http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/streamstats">http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/streamstats</A></P> Sat, 10 Mar 2018 11:11:26 GMT https://community.splunk.com/t5/Splunk-Search/How-to-calculate-moving-standard-deviation-in-Splunk/m-p/344829#M102161 martin_mueller 2018-03-10T11:11:26Z https://community.splunk.com/t5/Splunk-Search/How-to-calculate-moving-standard-deviation-in-Splunk/m-p/344830#M102162 <P>refer this, you will get some idea.</P> <P><A href="http://docs.splunk.com/Documentation/Splunk/7.0.2/Search/Findingandremovingoutliers">http://docs.splunk.com/Documentation/Splunk/7.0.2/Search/Findingandremovingoutliers</A></P> Sat, 10 Mar 2018 12:46:31 GMT https://community.splunk.com/t5/Splunk-Search/How-to-calculate-moving-standard-deviation-in-Splunk/m-p/344830#M102162 anjambha 2018-03-10T12:46:31Z