Query metaData

The query metadata contains detailed information about the execution of the query, including events, workload, and duration of the query processing.

Table: Metadata JSON Object Fields

FieldTypeDescription
costs The costs of executing the query
        liveCostnumber The cost of execution of a live query
        liveCostRatenumber The rate of the live cost query
        staticCostnumber The cost for executing as a static query
        staticCostRatenumber The rate for executing static queries
digestFlow Indicates how up to date the incoming data to the query is
        ingestTimeKnownGoodinteger Latest known ingest time for digested data
        maxIngestLatencyinteger Maximum ingest latency for the returned data
        minIngestTimeIncludedinteger Miniming ingest time for data included in the results
eventCountinteger Number of events in the result set
extraData  Additional data about the returned events
fieldOrderarray Order of the returned fields
filterQuery  Filter query structure continaing a definition of the query as requested. The structure matches the supplied QueryInputJob.
isAggregateboolean True if this is an aggregate query
pollAfterinteger How soon to poll the query after it has been submitted to expected results
processedBytesinteger Number of bytes processed to return results
processedEventsinteger Number of events processed in result set
queryEndinteger Timestamp of the end of the query
querySpent Structure defining the time and duration of the returned events
        day Total per day spent executing the query
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
        hour Total per hour spent executing the query
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
        oneMinute Total spent per one minute
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
        tenMinutes Total spent per ten minutes
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
queryStartinteger Timestampt of when the query started
queuedMillisinteger Number of milliseconds the query was queued before execution
quotaTotalSpent Structure definition to the total time spent used for calculating the quota
        day Total per day spent executing the query
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
        hour Total per hour spent executing the query
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
        oneMinute Total spent per one minute
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
        tenMinutes Total spent per ten minutes
                liveCostinteger Live cost of executing the query
                queryCountinteger Number of executions of the query
                staticCostinteger Static cost of executing the query
responderVHostinteger Number of the host returning the response
resultBufferSizeinteger Size of the buffer used to store the result
timeMillisinteger Time spent executing the query in milliseconds
totalWorkinteger Total amount of work to execute the query
warningstring Deprecated: Use warnings in the message root instead
warningsarray Use 'warnings' in the message root instead
workDoneinteger Estimate of the work done to complete the query