Back to Elasticsearch

Idelta

docs/reference/query-languages/esql/_snippets/functions/examples/idelta.md

9.4.0474 B
Original Source

% This is generated by ESQL's AbstractFunctionTestCase. Do not edit it. See ../README.md for how to regenerate it.

Example

esql
TS k8s
| STATS events = SUM(IDELTA(events_received)) by pod, time_bucket = TBUCKET(10minute)
events:doublepod:keywordtime_bucket:datetime
9.0one2024-05-10T00:10:00.000Z
7.0three2024-05-10T00:10:00.000Z
3.0two2024-05-10T00:00:00.000Z
0.0two2024-05-10T00:20:00.000Z