quantize Metrics Operator
You can use the quantize operator to control the Sumo Logic’s quantization behavior, which is described in detail in Metrics Quantization.
You can specify:
- The size of the time buckets across which Sumo Logic aggregates your metrics. If you do not specify a quantization interval, Sumo Logic determines an optimum size for time buckets, as described in Automatic quantization at query time.
- The rollup type that Sumo Logic uses to aggregate the individual data points in a time bucket, which can be one of
avg,min,max,sum,count, orrate. If you do not specify a rollup type in thequantizeclause of your query, for each time bucket, Sumo Logic presents the average of the data points in that bucket.
Syntax
quantize [to INTERVAL] [using ROLLUP] [drop last]
where:
INTERVALis the duration over which you want to quantize the metrics, in seconds (s), minutes (m), hours (h), or days (d).ROLLUPisavg,min,max,sum,count, orrate.drop lastcauses the last time bucket to be dropped, if the end of that bucket is after the end of the query time range.- At least one of the
to INTERVALorusing ROLLUPclauses needs to be present.
To apply the quantization directly to the selector, quantize has to follow the selector immediately. Otherwise, it will work on top of whatever has been returned by the previous step.
In the Metrics Search, you must switch to advanced mode to enter the drop last option.
Examples
Set time bucket size
The quantize clause in this metric query sets the time bucket size to 5 minutes. Sumo Logic will aggregate the metrics in each time bucket using the default rollup type, avg.
_sourceCategory=hostmetrics | quantize to 5m
Set time bucket size and rollup type
The quantize clause in this metric query sets the time bucket size to 10 minutes, and specifies the max rollup type. Sumo Logic will take maximum of the metric values in each 10 minute time bucket and return that value.
metric=CPU_User cluster=kafka | quantize to 10m using max
Set time bucket size, rollup type, and drop last
The quantize clause in this metric query sets the time bucket size to 10 minutes, and specifies the max rollup type. Sumo Logic will take maximum of the metric values in each 10 minute time bucket and return that value. If the last time bucket ends after the end of the query time range, that bucket is dropped.
metric=CPU_User cluster=kafka | quantize to 10m using max drop last
Omit time bucket size
In this example we omit the to INTERVAL part of the query and let Sumo Logic determine appropriate quantization interval according to How Sumo Logic chooses rollup table and quantization interval. max rollup type will be used to aggregate the metrics in each time bucket.
metric=CPU_User cluster=kafka | quantize using max