Returns the newest events.

limitnumberfalse200The maximum number of events to return. [a]

[a] When you provide only one parameter, the implied parameter is limit


Select the 10 newest with loglevel=ERROR

loglevel=ERROR | tail(10)

Select the 100 latest events and group them by loglevel

tail(limit=100) | groupby(loglevel)

Although the default is 200, if a number higher than this is specified, LogScale will attempt to return as many results up to that number. For example:

"GET /_images" |tail(1000)

Will return up to 1000 events matching an HTTP GET request for files in the _images directory. If there are only 287 matching events, all 287 will be returned.