Limit Operator

Overview

Limit the number of returned results with limit.

| limit <integer>

There is no guarantee as to which records are returned, unless a sort has already been performed on the data.

Example

Example data

let aws_alb = datatable [
  {"type": "https", "p_event_time": "2023-09-16 05:59:04.058", "sentBytes": 167},
  {"type": "https", "p_event_time": "2023-09-16 05:45:34.863", "sentBytes": 329},
  {"type": "https", "p_event_time": "2023-09-16 05:36:09.017", "sentBytes": 167},
  {"type": "https", "p_event_time": "2023-09-16 05:27:39.177", "sentBytes": 468992}
];

Limit to one result

aws_alb
| limit 1

EVENT
{ "p_event_time": "2023-09-16 05:59:04.058", "sentBytes": 167, "type": "https" }