Feedback:

last

Use the last aggregate function to select the last entry in a result set.

Syntax

|aggr last(<field>)[as <alias>]

<field>

Required. Specify the field which last value will be returned. If not specified, all present fields will be returned in the results.

<alias>

Optional. Specify the name of the output column. If not specified, the output column will be in the format ‘last_<field>’.

Usage

You can use the last function with the aggr operator to select the last row of data or last row of a particular field.

Examples

|aggr last(src_ip)