Skip to main content
Sumo Logic

queryEndTime()

Calculates the end time of a message.

queryEndTime()

The queryEndTime()  operator calculates the end time of a message. You can use it in  combination with queryStartTime() to establish times and ranges for your non-continuous queries.

Syntax:

queryEndTime() [ as alias ]

Rules:

  • An alias is required.

Examples:

To get a duration of your message time:

error
| (queryEndTime() - queryStartTime()) as duration

To list start time, end time, and duration:

error

| queryStartTime() as starttime

| queryEndTime() as endtime

| (queryEndTime() - queryStartTime()) as duration