Returns the newest events.

ParameterTypeRequiredDefaultDescription
limitnumberfalse200The maximum number of events to return. [a]
  Minimum1 
  Maximum10000 

[a] When you provide only one parameter, the implied parameter is limit

Examples

Select the 10 newest with loglevel=ERROR

logscale
loglevel=ERROR | tail(10)

Select the 100 latest events and group them by loglevel

logscale
tail(limit=100) | groupby(loglevel)

Although the default is 200, if a number higher than this is specified, LogScale will attempt to return as many results up to that number. For example:

logscale
"GET /_images" |tail(1000)

Will return up to 1000 events matching an HTTP GET request for files in the _images directory. If there are only 287 matching events, all 287 will be returned.