Assign the start of the search time interval to the field provided by parameter as.

The time is represented as milliseconds since January 1, 1970 (UTC). In live queries (where the search time interval is forever moving), start() is the current time minus the width of the search interval.

Note

The parser does not have a search interval; therefore, it does not make sense to use the start() query function here.

ParameterTypeRequiredDefault ValueDescription
as[a]stringoptional[b] _start Name of output field.

[a] The parameter name as can be omitted.

[b] Optional parameters use their default value unless explicitly set.

Hide omitted argument names for this function

Show omitted argument names for this function

start() Examples

Assign s the value of start():

logscale
s := start()

Use start() in an assignment:

logscale
isOld := (@timestamp - start()) < 1000

Click + next to an example below to get the full details.

Search Relative Time to Query Execution

Writing a query that is executed against a time range relative to when the query is executed