Finds the largest number for the specified field over a set of events. Result is returned in a field named _max.
Function Traits: Aggregate
| Parameter | Type | Required | Default | Description |
|---|---|---|---|---|
as | string | optional | _max | Name of output field. |
field[a] | string | required | Field to extract a number from. | |
type | string | optional | description | |
The parameter name for field can be omitted; the following forms are equivalent:
logscale
max("value")and:
logscale
max(field="value")