tail() Query Function

Returns the newest events.

Parameters

Name

Type

Required

Default

Description

limit

number

No

200

The maximum number of events to return. The maximum allowed is 10000.

The implied parameter is limit.

Examples

Select the 10 newest with loglevel=ERROR

humio
loglevel=ERROR | tail(10)

Select the 100 latest events and group them by loglevel

humio
tail(limit=100) | groupby(loglevel)

Although the default is 200, if a number higher than this is specified, Humio will attempt to return as many results up to that number. For example:

humio
"GET /_images" |tail(1000)

Will return up to 1000 events matching an HTTP GET request for files in the _images directory. If there are only 287 matching events, all 287 will be returned.