Skip to main content
Sumo Logic

queryStartTime()

Calculates the start time of a message

queryStartTime()

The queryStartTime()  operator calculates the start time of a message. You can use it in  combination with queryEndTime() to establish times and ranges for your non-continuous queries.

Syntax:

  • queryStartTime() [ as alias ]

Rules:

  • An alias is required.

Examples:

To get a duration of your message time:

error
| (queryEndTime() - queryStartTime()) as duration

To list start time, end time, and duration:

error | queryStartTime() as starttime

| queryEndTime() as endtime

| (queryEndTime() - queryStartTime()) as duration