chart/stats

The chart/stats operators are pipe expressions that apply aggregate operations over a set of events and/or results from an operator chaining query. Users can specify rules about how chart and stats operations are grouped and the events are organized into summary rows. For example, chart and stats operators can group events based on any field or time period.

 

For information about other operators, functions, and syntax requirements, see Use an Operator in the Query.