Query metaData
The query metadata contains detailed information about the execution of the query, including events, workload, and duration of the query processing.
Table: Metadata JSON Object Fields
| Field | Type | Description |
|---|---|---|
| costs | | The costs of executing the query |
| liveCost | number | The cost of execution of a live query |
| liveCostRate | number | The rate of the live cost query |
| staticCost | number | The cost for executing as a static query |
| staticCostRate | number | The rate for executing static queries |
| digestFlow | | Indicates how up to date the incoming data to the query is |
| ingestTimeKnownGood | integer | Latest known ingest time for digested data |
| maxIngestLatency | integer | Maximum ingest latency for the returned data |
| minIngestTimeIncluded | integer | Miniming ingest time for data included in the results |
| eventCount | integer | Number of events in the result set |
| extraData | Additional data about the returned events | |
| fieldOrder | array | Order of the returned fields |
| filterQuery |
Filter query structure containing a definition of the query as
requested. The structure matches the supplied
QueryJobInput.
| |
| isAggregate | boolean | True if this is an aggregate query |
| pollAfter | integer | How soon to poll the query after it has been submitted to expected results |
| processedBytes | integer | Number of bytes processed to return results |
| processedEvents | integer | Number of events processed in result set |
| queryEnd | integer | Timestamp of the end of the query |
| querySpent | | Structure defining the time and duration of the returned events |
| day | | Total per day spent executing the query |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| hour | | Total per hour spent executing the query |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| oneMinute | | Total spent per one minute |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| tenMinutes | | Total spent per ten minutes |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| queryStart | integer | Timestampt of when the query started |
| queuedMillis | integer | Number of milliseconds the query was queued before execution |
| quotaTotalSpent | | Structure definition to the total time spent used for calculating the quota |
| day | | Total per day spent executing the query |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| hour | | Total per hour spent executing the query |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| oneMinute | | Total spent per one minute |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| tenMinutes | | Total spent per ten minutes |
| liveCost | integer | Live cost of executing the query |
| queryCount | integer | Number of executions of the query |
| staticCost | integer | Static cost of executing the query |
| responderVHost | integer | Number of the host returning the response |
| resultBufferSize | integer | Size of the buffer used to store the result |
| timeMillis | integer | Time spent executing the query in milliseconds |
| totalWork | integer | Total amount of work to execute the query |
| warning | string | Deprecated: Use warnings in the message root instead |
| warnings | array | Use 'warnings' in the message root instead |
| workDone | integer | Estimate of the work done to complete the query |