Skip to content
Content was updated: Jun 10, 2025
This is an archived version of the documentation downloaded from LogScale Documentation Archives. Up to date documentation, and documentation for later versions, is available on LogScale Documentation

## `start()`

The `start()` function assigns a timestamp to an output field specified by the `as` parameter. This timestamp represents the beginning of the search time interval in milliseconds since January 1, 1970 (UTC).

For live queries (where the search time interval is forever moving), `start()` equals the current time minus the search interval.

For subqueries in `defineTable()` or joins, `start()` equals the start time of the subquery's search interval.

### Note

The `start()` function is not compatible with parser operations because parsers do not use search intervals.

Parameter | Type | Required | Default Value | Description
--- | --- | --- | --- | ---
`as`[a] | string | optional[b] | `_start` | Name of output field.
[a] The parameter name `as` can be omitted. [b] Optional parameters use their default value unless explicitly set.

Hide omitted argument names for this function

Show omitted argument names for this function

> Omitted Argument Names

> The argument name for `as` can be omitted; the following forms of this function are equivalent:

> logscale Syntax

>     start("value")

> and:

> logscale Syntax

>     start(as="value")

> These examples show basic structure only.

### `start()` Syntax Examples

Assign s the value of `start()`:

logscale

    s := start()

Use `start()` in an assignment:

logscale

    isOld := (@timestamp - start()) < 1000

#### Enter search term