This page explains how to use the limit operator in APL.
limit
operator in Axiom Processing Language (APL) allows you to restrict the number of rows returned from a query. It is particularly useful when you want to see only a subset of results from large datasets, such as when debugging or previewing query outputs. The limit
operator can help optimize performance and focus analysis by reducing the amount of data processed.
Use the limit
operator when you want to return only the top rows from a dataset, especially in cases where the full result set is not necessary.
Splunk SPL users
limit
is the head
command, which also returns the top rows of a dataset. The main difference is in the syntax.ANSI SQL users
LIMIT
clause is equivalent to the limit
operator in APL. The SQL LIMIT
statement is placed at the end of a query, whereas in APL, the limit
operator comes after the dataset reference.N
: The maximum number of rows to return. This must be a non-negative integer.limit
operator returns the top N
rows from the input dataset. If fewer than N
rows are available, all rows are returned.
limit
can help narrow the focus on those rows.Query_time | req_duration_ms | id | status | uri | method | geo.city | geo.country |
---|---|---|---|---|---|---|---|
2024-10-17T12:00:00 | 200 | 123 | 200 | /index.html | GET | New York | USA |
2024-10-17T11:59:59 | 300 | 124 | 404 | /notfound.html | GET | London | UK |
['sample-http-logs']
dataset, returning recent HTTP log entries.