Core Aggregation Operators

The 8 core ops cover the basic statistical primitives: counts, sums, central tendency, dispersion, and ratios.

All core ops are O(1) per-event memory and Tier 1 CPU. Lifetime mode is permitted for all 8.

Operators

Op Description
bv.count Event count over a window or lifetime.
bv.sum Numeric sum of a field.
bv.mean Arithmetic mean of a field. (Renamed from avg per ADR-002.)
bv.min Minimum value of a field.
bv.max Maximum value of a field.
bv.var Sample variance (Welford). (Renamed from variance.)
bv.std Standard deviation. (Renamed from stddev.)
bv.ratio Count matching predicate / total count.

See also