Skip to main content

facets

Class: sugar · Streaming: accumulating

Top values per requested field in one result (_facet/_value/count columns).

Signature

| facets <fields> [limit=<int>]

Positional Arguments

NameTypeRequiredDescription
fieldsfield_listYes-

Options

NameTypeDefaultDescription
limitint10-

Desugars To

union of per-field `stats count() as count by <f> | sort -count | head <limit> | extend _facet = "<f>", _value = string(<f>) | keep _facet, _value, count`

Examples

facets service, host limit=5

Generated from the LynxFlow registry. See RFC-002 for the full language specification.