Loading

ES|QL IRATE function

Embedded
field
the metric field to calculate the value for
window

the time window over which to compute the irate

Calculates the irate of a counter field. irate is the per-second rate of increase between the last two data points (it ignores all but the last two data points in each time period). This function is very similar to rate, but is more responsive to recent changes in the rate of increase.

field window result
counter_double time_duration double
counter_integer time_duration double
counter_long time_duration double
TS k8s | WHERE pod == "one"
| STATS irate_bytes_in = SUM(IRATE(network.total_bytes_in)) BY cluster, time_bucket = TBUCKET(10minute)
		
irate_bytes_in:double cluster:keyword time_bucket:datetime
0.076923 prod 2024-05-10T00:00:00.000Z
830.0 qa 2024-05-10T00:00:00.000Z
31.375 staging 2024-05-10T00:00:00.000Z
9.854545 prod 2024-05-10T00:10:00.000Z
18.7 qa 2024-05-10T00:10:00.000Z