Finds the largest number for the specified field over a set of events. Result is returned in a field named _max
Name | Type | Required | Default | Description |
---|---|---|---|---|
field | string | Yes | field to extract a number from | |
as | string | No | _max | name of output field |
field
is the unnamed parameter.
What was the maximum responsetime
max(responsetime)