This page explains how to use the max aggregation function in APL.
max
aggregation in APL allows you to find the highest value in a specific column of your dataset. This is useful when you need to identify the maximum value of numerical data, such as the longest request duration, highest sales figures, or the latest timestamp in logs. The max
function is ideal when you are working with large datasets and need to quickly retrieve the largest value, ensuring you’re focusing on the most critical or recent data point.
Splunk SPL users
max
function works similarly, used to find the maximum value in a given field. The syntax in APL, however, requires you to specify the column to aggregate within a query and make use of APL’s structured flow.ANSI SQL users
MAX
works similarly to APL’s max
. In SQL, you aggregate over a column using the MAX
function in a SELECT
statement. In APL, you achieve the same result using the summarize
operator followed by the max
function.ColumnName
: The column or field from which you want to retrieve the maximum value. The column should contain numerical data, timespans, or dates.max_req_duration_ms |
---|
5400 |
req_duration_ms
field, which helps you identify the slowest requests.