Finds the largest number for the specified field over a set of events. Result is returned in a field named _max.

ParameterTypeRequiredDefault ValueDescription
asstringoptional[a]_max Name of output field.
field[b]stringrequired  Field to extract a number from.
typestringoptional[a]  description

[a] Optional parameters use their default value unless explicitly set.

[b] The argument name field can be omitted.

Hide omitted argument names for this function

Show omitted argument names for this function

max() Examples

Return what was the maximum responsetime:

logscale
max(responsetime)

Filter for events in the repository with maximum responsetime values greater than 5 seconds:

logscale
max(responsetime)
| _max> 5