The queryEndTime() operator calculates the end time of a message. It returns the end time of the query in milliseconds. You can use it in combination with queryStartTime() to establish times and ranges for your non-continuous queries.
queryEndTime() as [alias]
- An alias is required.
To get a duration of your message time:
| (queryEndTime() - queryStartTime()) as duration
To list start time, end time, and duration:
| queryStartTime() as starttime
| queryEndTime() as endtime
| (endtime - starttime) as duration