max

Max aggregation operator. There are two variants of the :max operator.

Aggregation

Input Stack: Query

⇨

Output Stack: AggregationFunction

Select the maximum value for corresponding times across all matching time series.

name,ssCpuUser,:eq,
:max

When matching against the sample data in the table below, the highlighted time series would be included in the aggregate result:

Name	nf.app	nf.node	Data
ssCpuUser	alerttest	i-0123	[1.0, 2.0, NaN]
ssCpuSystem	alerttest	i-0123	[3.0, 4.0, 5.0]
ssCpuUser	nccp	i-0abc	[8.0, 7.0, 6.0]
ssCpuSystem	nccp	i-0abc	[6.0, 7.0, 8.0]
numRequests	nccp	i-0abc	[1.0, 2.0, 4.0]
ssCpuUser	api	i-0456	[1.0, 2.0, 2.0]

The values from the corresponding intervals will be aggregated. For the first interval using the sample data above the values are 1.0, 8.0, and 1.0. Each value other than NaN contributes one to the max. This leads to a final result of:

Name	Data
ssCpuUser	[8.0, 7.0, 6.0]

The only tags for the aggregated result are those that are matched exactly (:eq clause) as part of the choosing criteria or are included in a group by.

Math

Input Stack: TimeSeriesExpr

⇨

Output Stack: TimeSeriesExpr

Select the maximum value for corresponding times across the time series resulting from the input expression. This is typically used when there is a need to use some other aggregation for the grouping. Example:

Before	After
name,sps,:eq, :sum, (,nf.cluster,),:by	name,sps,:eq, :sum, (,nf.cluster,),:by, :max