Finds a limited number of events, starting with the oldest, sorted by the the event timestamp. This function is equivalent to the command-line head tool.

ParameterTypeRequiredDefaultDescription
limit[a]numberoptional[b]200 The maximum number of events to compute.
  Minimum0 
  Maximum20,000 

[a] The argument name limit can be omitted.

[b] Optional parameters use their default value unless explicitly set

Omitted Argument Names

The argument name for limit can be omitted; the following forms of this function are equivalent:

logscale
head("0")

and:

logscale
head(limit="0")

The maximum value of the limit parameter can be adjusted using the StateRowLimit dynamic configuration.

head() Examples

  • Select the 10 oldest with loglevel=ERROR

    logscale
    loglevel=ERROR
| head(10)

  • Select the 100 oldest events and group them by loglevel

    logscale
    head(limit=100)
| groupby(loglevel)