tail( ) Query Function

Returns the newest events.


Name Type Required Default Description
limit number No 200 The maximum number of events to return. The maximum allowed is 10000.

limit is the unnamed parameter.


Select the 10 newest with loglevel=ERROR

loglevel=ERROR | tail(10)

Select the 100 latest events and group them by loglevel

tail(limit=100) | groupby(loglevel)