This page explains how to use the min aggregation function in APL.
min
aggregation function in APL returns the minimum value from a set of input values. You can use this function to identify the smallest numeric or comparable value in a column of data. This is useful when you want to find the quickest response time, the lowest transaction amount, or the earliest date in log data. It’s ideal for analyzing performance metrics, filtering out abnormal low points in your data, or discovering outliers.
Splunk SPL users
min
function works similarly to APL’s min
aggregation, allowing you to find the minimum value in a field across your dataset. The main difference is in the query structure and syntax between the two.ANSI SQL users
MIN
function works almost identically to the APL min
aggregation. You use it to return the smallest value in a column of data, grouped by one or more fields.Expression
: The expression from which to calculate the minimum value. Typically, this is a numeric or date/time field.id | min_req_duration_ms |
---|---|
user_123 | 32 |
user_456 | 45 |
max
when you need to find the highest value instead of the lowest.avg
to find the mean value instead of the minimum.count
when you need to know how many records or unique values exist, rather than calculating the minimum.sum
when you need the total of a set of values rather than the minimum.percentile
if you need a value that falls at a certain point in the distribution of your data, rather than the minimum.