Finds the newest events.
Hide omitted argument names for this function
Omitted Argument NamesThe argument name for
limit
can be omitted; the following forms of this function are equivalent:logscaletail("1")
and:
logscaletail(limit="1")
These examples show basic structure only.
The maximum value of the limit
parameter can be
adjusted using the
StateRowLimit
dynamic
configuration.
tail()
Examples
Select the 10 newest where loglevel=ERROR
:
loglevel=ERROR
| tail(10)
Select the 100 latest events and group them by loglevel
tail(limit=100)
| groupby(loglevel)
Although the default is 200, if a number higher than this is specified, LogScale will attempt to return as many results up to that number. For example:
"GET /_images"
| tail(1000)
Will return up to 1000 events matching an HTTP GET request for files in
the _images
directory. If there are only 287
matching events, all 287 will be returned.