How to retrieve the final value from the last instance of a field?

[KyleMcDougall]

Hello,

I'm trying to pull the final value for a product name. In a single event, we make multiple calls to an API for the product name and the product may change with each API call. I'm trying to build out a table for the final product name (the field doesn't change), but can't figure out what command to use.

Here's what I have so far. 

index=conversation crm_accounts_phone__product_name=*
| rename crm_accounts_phone__product_name as product
| stats latest(product)
| table product

 Appreciate any help!

[ITWhisperer · Accepted solution]

If latest() is not working for you, try

| stats last(product)