STAT_STDDEV Function Explanation

[mscirri]

All of the STAT_STDDEV functions end with a colon and some number.   I am assuming the number represents some sort of time frame, but I cannot find any documentation on this.   Can someone help explain the structure of this function?

EXAMPLE:  STAT_STDDEV(SUM(Total Flows):125)

FortiSIEM 

[cdurkin_FTNT · Accepted solution]

Profile Number..

/opt/phoenix/data-definition/profile/ProfileReports.xml

<DataRequest id="125" type="Report" profileET="PH_PROF_ET_125_CLIENT_AGGR" numRows="100000">
<Name>Source traffic profile</Name>

...

Covered in NSE7 FortiSIEM Advanced Analytics Courseware

[mscirri]

I tried registering for the training site but when I try to create an account, it just keeps reloading the page.   I give up. lol

Thank you for your help though.