Summary
topk(<numberOfTimeSeries>, [mean|median|min|max|sum|count|last, [<timeWindow>,]] <tsExpression>)
Ranks the time series described by the expression, and returns just the specified number of top-ranked series. Ranking for a time series is based on its last data value in the current chart, or on a summarization of its last data values over a specified time window.
Parameters
| Property | Description |
|---|---|
| numberOfTimeSeries | Number of top-ranked time series to be returned. |
| mean|median|min|max|sum|count|last | Summarization method to use for combining data values in a time series. These are similar to the Summarize by options that you can set for a chart. Default is to rank each series according to the value of its last (rightmost) data point on the current chart, if this parameter is not specified. |
| timeWindow | Length of the time window over which to summarize data values in a time series, if a summarization method is specified. You can specify a time measurement based on the clock or calendar (1s, 1m, 1h, 1d, 1w), the window length (1vw) of the chart, or the bucket size (1bw) of the chart. Default is 1vw, if this parameter is not specified. |
| tsExpression | Expression that describes the time series to be ranked and filtered. |
Description
The topk() function ranks the time series described by the expression, and then filters these series by returning just the specified number of series at the top of the ranking.
About Ranking
Depending on the parameters you specify, the time series are ranked from top to bottom based one or more data values in each series:
-
By default, the ranking is based on the value of the latest (rightmost) single data point displayed for each series on the current chart. When a chart shows live data, each series is therefore ranked according to its most recently reported value. The series with the highest rightmost value has the top ranking.
-
If you specify a summarization method (
mean,median,sum, etc.), the ranking is based on a summary value obtained from each series by combining one or more of its rightmost data values. For example,meanproduces a summary value for a series by averaging data values, and the series with the highest average has the top ranking.- By default, the summary value for a series combines all of the values shown for the series in the current chart.
- If you specify a time window parameter, the summary value combines just the data values reported during that time window. The time window always includes the last (rightmost) data value in the chart. For example, in a live data chart, a time window of
2hsays to summarize the data values reported in the past 2 hours.
Parameter Usage Overview
The following table shows how the parameters of topk() affect the results.
| Sample Parameters | Basis for Ranking Each Time Series | Sample Results |
|---|---|---|
topk(3, ts(my.metric)) |
Value of the rightmost data point displayed for the series on the chart. | Returns the 3 time series with the highest data values at the right edge of the chart. |
topk(3, max, ts(my.metric)) |
Summary value obtained from the data points reported by the series during the chart's time window. | Returns the 3 time series that had the highest maximum data values during the chart's time window. |
topk(3, max, 2h, ts(my.metric)) |
Summary value obtained from the data points reported by the series during the specified time window. | Returns the 3 time series that had the highest maximum data values during the last 2 hours before the end of the chart. |
Examples
Unfiltered Series
This chart shows 3 time series that report the total number of requests from 3 sources. We will filter these series in the following examples.
Example 1: Ranking by Rightmost Data Value
Here we use topk() to show only the top 2 time series (from sources app-13 and app-11). The ranking is based on the value of the rightmost data point shown for each series in the chart, which was reported at 12:35pm:
Example 2: Ranking by Summarized Data Values
Here we use topk() with the max summarization method to show the time series (from sources app-11 and app-12) that had the two highest peaks across the entire chart. The results might change if you change the chart’s time window.
Example 3: Ranking by Data Values Summarized Over a Shorter Time Window
Here we use topk() with the max summarization method over the final 5 minutes of the chart. In contrast to Example 2, the top 2 time series are now from sources app-13 and app-11. The highest peaks within the 5 minute time window differ from the highest peaks across the entire chart.
