...

Calculates the maximum of the values in a specified column in the search query results.

Syntax

max <column[column_name>name]

Required Arguments

column_name

...

From all the search query results, returns the maximum value in the specified column_name.

Examples

Example

...

1:  

...

* in log.access | max Bytes Sent 

 Returns Returns the maximum value of value of the column Bytes Sent in  in the events from access log.

Example 2:  

http in log.iis log| max time-taken | group by c-ip 

From the events from log.iss log that have the text http in their column values, finds and returns the maximum value in the time-taken column per each c-ip column value.