Applies the HyperLogLog++ algorithm to a set of data, which is used to calculate the estimated count of distinct elements in each group. The format of the aggregated values is dc (distinct count), which is needed to apply the create column operations in the Statistical group.
This operation returns the same results as the HyperLogLog++ Count Estimation (hllppcount) operation, the only difference is the output data type.
How does it work in the search window?
After grouping the data, select Aggregation in the search window toolbar, then select the HyperLogLog++ operation. You need to specify one argument:
The data type of the aggregated values is dc.
demo.ecommerce.data table, we want to calculate the count of distinct elements in the bytesTransferred records each 5-minute period. Before aggregating the data, the table must be grouped in 5-minute intervals.
The arguments needed for the aggregation are:
- Source- bytesTransferred column
Click Aggregate function and you will see the following result:
How does it work in LINQ?
Group your data using the following structure:
as... to add the new column that will show the aggregated values. This is the syntax for the HyperLogLog++ operation:
See Build a query using LINQ to learn more about grouping and aggregating your data using the LINQ language.
You can copy the following LINQ script and try the above example on the
from demo.ecommerce.data group every 5m every 5m select hllpp(bytesTransferred) as bytesTransferred_hllpp