% This is generated by ESQL's AbstractFunctionTestCase. Do not edit it. See ../README.md for how to regenerate it.

**Example**

```esql
FROM k8s
| STATS first_bytes_in = FIRST(network.bytes_in, @timestamp) BY pod
| SORT pod ASC
```

| first_bytes_in:long | pod:keyword |
| --- | --- |
| 278 | one |
| 473 | three |
| 699 | two |