rank_tdigest()

Applies to: ✅ Azure Data Explorer ✅ Azure Monitor ✅ Microsoft Sentinel

Calculates the approximate rank of the value in a set. Rank of value v in a set S is defined as count of members of S that are smaller or equal to v, S is represented by its tdigest.

rank_tdigest(digest, value)

Learn more about syntax conventions.

The rank foreach value in a dataset.

In a sorted list (1-1000), the rank of 685 is its index:

range x from 1 to 1000 step 1
| summarize t_x=tdigest(x)
| project rank_of_685=rank_tdigest(t_x, 685)

Output

This query calculates the rank of value 4490$ over all damage properties costs:

StormEvents
| summarize tdigestRes = tdigest(DamageProperty)
| project rank_of_4490=rank_tdigest(tdigestRes, 4490) 

Output

Getting the estimated percentage of the rank (by dividing by the set size):

StormEvents
| summarize tdigestRes = tdigest(DamageProperty), count()
| project rank_tdigest(tdigestRes, 4490) * 100.0 / count_

Output

The percentile 85 of the damage properties costs is 4490$:

StormEvents
| summarize tdigestRes = tdigest(DamageProperty)
| project percentile_tdigest(tdigestRes, 85, typeof(long))

Output