-
Notifications
You must be signed in to change notification settings - Fork 74
/
Copy pathlimit_agg_tail.toml
27 lines (27 loc) · 1.38 KB
/
limit_agg_tail.toml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
query = "* | json | count by level | limit -1"
input = """
{"level": "error", "message": "Oh now an error!"}
{"level": "error", "message": "So many more errors!", "num_things": 0.1}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A thing happened", "num_things": 12}
{"level": "info", "message": "A different event", "event_duration": 1002.5}
{"level": "info", "message": "A thing happened", "num_things": 1102}
{"level": null}
"""
output = """
level _count
---------------------------
None 1
"""
notes = "If the implicit sort operator isn't added after the count, the output will be `error` and not `info`"