Splunk Search

How to calculate moving standard deviation in Splunk?

payal23
Path Finder

_time, Prev Week(count),Prev 2 week(count),avg,3*Std Dev,Current count,Delta,RAG
1:30 8 7 7.5 2.121320344 8 0.5 OK
2:00 9 9 9 0 5 4 Alert
2:30 10 11 10.5 2.121320344 11 0.5 OK
3:00 11 10 10.5 2.121320344 8 2.5 Alert
3:30 12 12 12 0 7 5 Alert
4:00 12 12 12 0 10 2 Alert
4:30 13 14 13.5 2.121320344 8 5.5 Alert
5:00 13 13 13 0 8 5 Alert
5:30 14 13 13.5 2.121320344 7 6.5 Alert

0 Karma
1 Solution

martin_mueller
SplunkTrust
SplunkTrust

Streamstats lets you calculate many statistical functions over any window: http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/streamstats

View solution in original post

0 Karma

anjambha
Communicator
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

Streamstats lets you calculate many statistical functions over any window: http://docs.splunk.com/Documentation/Splunk/7.0.2/SearchReference/streamstats

0 Karma
Get Updates on the Splunk Community!

Splunk Lantern | Spotlight on Security: Adoption Motions, War Stories, and More

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...