11rate_of_long_no_grouping
2+ required_capability: metrics_command
23TS k8s
34| STATS rate_bytes_in=avg(rate(network.total_bytes_in)) BY time_bucket = bucket(@timestamp,1minute)
45| SORT rate_bytes_in DESC, time_bucket DESC | LIMIT 10;
@@ -17,6 +18,7 @@ null | 2024-05-10T00:01:00.000Z
1718;
1819
1920rate_of_long_grouping
21+ required_capability: metrics_command
2022TS k8s
2123| STATS rate_bytes_in=avg(rate(network.total_bytes_in)) BY cluster, time_bucket = bucket(@timestamp,5minute)
2224| SORT rate_bytes_in DESC, time_bucket, cluster | LIMIT 10;
@@ -36,6 +38,7 @@ rate_bytes_in:double | cluster:keyword | time_bucket:datetime
3638;
3739
3840rate_of_double_no_grouping
41+ required_capability: metrics_command
3942TS k8s
4043| STATS rate_cost=sum(rate(network.total_cost)) BY time_bucket = bucket(@timestamp,1minute)
4144| SORT rate_cost DESC, time_bucket | LIMIT 10;
@@ -55,6 +58,7 @@ null | 2024-05-10T00:01:00.000Z
5558;
5659
5760rate_with_filtering
61+ required_capability: metrics_command
5862TS k8s | WHERE pod == "one"
5963| STATS rate_bytes_in = sum(rate(network.total_bytes_in)) BY cluster, time_bucket = bucket(@timestamp, 10minute)
6064| SORT time_bucket, cluster | LIMIT 10;
@@ -73,6 +77,7 @@ rate_bytes_in:double | cluster:keyword | time_bucket:datetime
7377;
7478
7579eval_on_rate
80+ required_capability: metrics_command
7681TS k8s
7782| STATS rate_bytes = avg(rate(network.total_bytes_in)) BY cluster, time_bucket = bucket(@timestamp, 10minute)
7883| EVAL rate_kb = rate_bytes / 1024.0
@@ -93,6 +98,7 @@ rate_bytes:double | cluster:keyword | time_bucket:datetime | rate_kb:double
9398;
9499
95100rate_of_aggregate_metric
101+ required_capability: metrics_command
96102TS k8s-downsampled
97103| STATS rate_bytes = sum(rate(network.total_bytes_in)),
98104 max_bytes = max(rate(network.total_bytes_in)),
0 commit comments