max( ) Query Function

Finds the largest number for the specified field over a set of events. Result is returned in a field named _max

Parameters

Name Type Required Default Description
field string Yes field to extract a number from
as string No _max name of output field

field is the unnamed parameter.

Examples

What was the maximum responsetime

max(responsetime)