Finds the smallest number for the specified field over a set of events. Result is returned in a field named _min.
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
field
can be omitted; the following forms of this function are equivalent:logscale Syntaxmin("value")
and:
logscale Syntaxmin(field="value")
These examples show basic structure only.
min()
Examples
Return what was the minimum responsetime:
logscale
min(responsetime)
Filter for events with a responsetime greater than 5 seconds:
logscale
min(responsetime)
| _min> 5