around
Description
The around keyword allows users to declare a timerange, defined as some interval before and after a timestamp, on which a query should operate.
Note
The interval, if specified, MUST be positive.
Note
If the interval is not specified, then a default value of 30m is used.
Syntax
source (logs|spans) around <time> [interval <interval>]
Example
The around keyword can be used on logs or spans like so:
Example query
source logs around @'2021-01-01T00:00:00Z' interval 1h
source spans around @'2021-01-01T00:00:00Z' interval 1h
Last updated on