Current view: XpoLog V7 (Latest). Available: XpoLog V6 and XpoLog V5

Skip to end of metadata
Go to start of metadata

Synopsis

Displays the time between the first and last event in a group.

Syntax

time

Required Arguments

None

Optional Arguments

Date_Column_Name

Syntax: <character string>

Description: The name of a specific log column which contains a date/timestamp.

Date_Column_Format

Syntax: <character string>

Description: The date format of the column Date_Column_Name.

Description

Shows the unformatted amount of time between the first and last event in a group - calculated by default based on the log event's main date field. Should be formatted and displayed in time format.

Note: The default time is counted in milliseconds.

Examples

Example 1:  

* in log.access | time | display time in time format

Displays the time between the first and last event in log access in time format.

Example 2:  

10.10.10.10 in log.access | time | display time in time format

Displays the time between the first and last event with client IP 10.10.10.10 in log access in time format.

Example 3:  

* in log.access | time originalTimeStamp ("MM/dd/yyyy HH:mm:ss.SSS") | display time in time format

Displays the time between the first and last event in log access based on the values of the specified log column originalTimeStamp (not the event's main date field) which has the specified date format "MM/dd/yyyy HH:mm:ss.SSS" in time format.

 

  • No labels