stddev_population - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR Documentation

Product
Cortex XDR
Creation date
2024-03-06
Last date published
2024-10-01
Category
Administrator Guide
Abstract

Learn more about the Cortex Query Language stddev_population() function used with both comp and windowcomp stages.

Syntax
Description

The stddev_population() function is used to return a single population (biased) variance value of a field for a group of rows. The function syntax and application is based on the preceding stage:

Examples