Changing Time Interval
The Time Range of the query is set in the UI. It is strongly recommended to limit the time range of queries as much as possible. This ensures that LogScale is searching the relevant data to the information required, improving efficiency and reducing unnecessary data processing.
![]() |
Figure 78. Data Time Interval
Elements of the Time Range controls:
The time zone picker allows you to set a temporary time zone for your search. This setting will influence how time ranges using calendar definitions - such as fixed time range and intervals like
today
orlast month
— calculate the query's start and end timestamps. For more information on setting the time zone, see Set Time Zone.The Time Selector enables you to specify the time range for your query.
Use the navigation arrows (< and >) to move backward and forward through time intervals.
The
allows you to quickly extend the time range by the same interval, making it easy to expand your search scope incrementally.
Live query checkbox. LogScale offers two modes for running queries: live and static.
Live queries are ideal for monitoring scenarios where you need to observe the data as it arrives.
These queries use a time interval relative to the current moment (e.g. last 5 minutes, last 1 day).
When enabled, results will update as soon as new data becomes available.
Time Intervals that use anchoring (e.g. today, yesterday) are not supported in live queries.
Static queries are better suited for investigating past events.
All time interval definitions are supported in this mode.
Available Time Intervals
Presets: quickly select from commonly used time intervals.
Use case: ideal for frequent searches, allowing you to select standard time ranges, like
last 24 hours
orlast 7 days
with a single click.
Relative Time Range allows more flexibility in selecting a relative time range
The Simple tab provides flexible adjustment of the start of the time interval, with the most common units like days, hours, minutes etc. The time interval is always relative to now.
The Advanced tab provides a fully customisable approach to the specified time range:
You can set the relative time ranges that end in the past. For example, you might want to analyze the last 24 hours of data but exclude the most recent hour to account for data delays.
You can specify Calendar-Based intervals, such as the last 3 calendar months, rather then fixed intervals like 90 days.
The Advanced tab utilizes LogScale relative time syntax. Specifying the Calendar-Based time ranges requires using the Anchoring syntax.
The
@
allows snapping time intervals to a specific point, like the beginning of the day or month. Whatever follows @ is treated as the anchor point. You can use specific time syntax, or a function such as @month-1ms which means "beginning of the month, minus 1 millisecond".The
calendar:
keyword interprets time ranges using calendar terms (e.g. months are defined by the calendar rather than fixed 30-day period).
For more information on using advanced relative time selectors, see Advanced Time Syntax.
Additional features of the Time Selector
Time Intervals can be copied and pasted between search session using the Copy and Paste icons in the top right of the panel.
The Time field selection controls which time field (@timestamp or @ingesttimestamp) is used when evaluating the time range for a query. By default, @timestamp is used. Use @ingesttimestamp when validating an Aggregate Alert query, see Select alert timestamp for more information.
Note
The following specific behaviors exist when using the time interval selection:
Live mode is only available when using relative time ranges.
When you change the timetable from the Time dropdown, the liveness of the query is not impacted unless you enable the checkbox in order to run it as a live query instead, while the timeframe previously selected is kept.
When you disable the
checkbox, the query running will be stopped.The query on the Enter or click in the query editor to make it run again.
page also stops if you change to a relative or fixed time while it is running. Press
Tip
You can move the time interval to be earlier or later by clicking the Time dropdown field. You can make the interval of time larger (for example from 5 min to 10 min ago) by clicking the icon.
and buttons in the