Feedback:
first
Use the first aggregate function to select the first entry in a result set.
Syntax
|aggr first(<field>)[as <alias>]
<field>
|
Required. Specify the field which first value will be returned. If not specified, all present fields will be returned in the results. |
<alias>
|
Optional. Specify the name of the output column. If not specified, the output column will be in the format |
Usage
You can use the first function with the aggr operator to select the first row of data or the first row of a particular field.
Examples
|aggr first(src_ip)