Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
maxLevel2
typeflat

...

This operation returns the highest value below the 75th percentile of a specified column field for each grouping occurrence using linear interpolation.

How does it work in the search window?

Note

Before being able to perform this operation, you have to group your data. Be aware that the columns fields used as arguments for the grouping operation will not be available to select as arguments for the aggregation operation.

After grouping the data, select Aggregation in the search window toolbar, then select the Percentile 75 / 3rd quartile operation. You need to specify one argument:

Argument

Data type

Source mandatory

integer

The data type of the aggregated values is integer.

Example

In the demosiem.logtrust.ecommerceweb.data activity table, we want to get the highest value below the 75th percentile of the bytesTransferred column contentLength field in each 5-minute period. Before aggregating the data, the table must be grouped in 5-minute intervals. Then we will perform the aggregation using the Percentile 75 operation.

The arguments needed for the Percentile 75 operation are:

  • Source → bytesTransferred columnSource → contentLength field

...

Click Aggregate function and you will see the following result:

...

Group your data using the following structure:

  • group every server period by column1period by field1, column2 field2...
    every client period

Then, use select... as...  to add the new column field that will show the aggregated values. This is the syntax for the Percentile 75 / 3rd quartile operation:

  • percentile75(integer_columnfield)

See Build a query using LINQ to learn more about grouping and aggregating your data using the LINQ language.

...

You can copy the following LINQ script and try the example above on the demosiem.logtrust.ecommerceweb.dataactivity table:

Code Block
from demosiem.logtrust.ecommerceweb.dataactivity
  group every 5m
  every 5m
  select percentile75(bytesTransferredcontentLength) as percentile75_bytescontentLength