Finds a limited number of events, starting with the oldest, sorted by the the event timestamp. This function is equivalent to the command-line head tool.

ParameterTypeRequiredDefault ValueDescription
limit[a]numberoptional[b]200 The maximum number of events to compute.
  Minimum0 
  Maximum20,000 

[a] The argument name limit can be omitted.

[b] Optional parameters use their default value unless explicitly set.

Hide omitted argument names for this function

Show omitted argument names for this function

The maximum value of the limit parameter can be adjusted using the StateRowLimit dynamic configuration.

head() Examples

  • Select the 10 oldest with loglevel=ERROR

    logscale
    loglevel=ERROR
    | head(10)
  • Select the 100 oldest events and group them by loglevel

    logscale
    head(limit=100)
    | groupby(loglevel)