ES|QL TO_GAUGE function

×

field

Input value. The input can be a single- or multi-valued column or an expression.

Converts a counter value to its gauge (plain numeric) equivalent. The output type is determined by the input: counter_long converts to long, counter_integer to integer, and counter_double to double. No values are modified; only the type annotation changes. If the input is already a plain numeric or aggregate_metric_double, the function is a no-op. This is useful when a metric field was misclassified as a counter type instead of a plain numeric (gauge) in the index mapping. This function is also available as the ::gauge cast operator.

TS k8s
| STATS bytes_in = avg(avg_over_time(network.bytes_in::gauge)) BY cluster, time_bucket = bucket(@timestamp, 10minute)
| EVAL bytes_in = round(bytes_in, 4)
| KEEP bytes_in, cluster, time_bucket
| SORT time_bucket, cluster
| LIMIT 10;