RunningQuery
is a
datatype for a query that is currently being executed.
Table: RunningQuery
Parameter | Type | Required | Default | Stability | Description |
---|---|---|---|---|---|
Some arguments may be required, as indicated in the Required column. For some fields, this column indicates that a result will always be returned for this column. | |||||
Table last updated: Mar 19, 2025 | |||||
clients | [Client ] | yes | Long-Term | A list of clients. See Client . | |
coordinatorId | string | yes | Long-Term | The unique identifier of the coordinator. | |
DeltaLiveCost | float | yes | Long-Term | Live cost calculation last 30 seconds. | |
deltaLiveMillis | float | yes | Long-Term | Live CPU time spent the last 30 seconds. | |
deltaMapMillis | float | yes | Long-Term | Static CPU time spent the last 30 seconds. | |
DeltaStaticCost | float | yes | Long-Term | Static cost calculation last 30 seconds. | |
deltaTotalAllocations | long | yes | Long-Term | The change of the total number of bytes that were allocated. | |
deltaTotalCost | float | yes | Long-Term | Total cost calculation last 30 seconds. | |
estimatedTotalBytes | long | yes | Long-Term | The estimated total bytes of data that will be searched by the query. | |
id | string | yes | Long-Term | The unique identifier of the running query. | |
includedBytes | long | yes | Long-Term | The number of bytes that were included in the processing of the query (i.e., the estimated minus the skipped). | |
InitiatedBy | string | Long-Term | Who or what initiated the running query. | ||
isDashboard | boolean | yes | Long-Term | Whether the running query is used in a dashboard. | |
isHistoricDone | boolean | yes | Long-Term | Whether the query of historic data has completed. | |
isLive | boolean | yes | Long-Term | Whether the query is using live data. | |
liveAllocations | long | yes | Long-Term | The total number of bytes that were allocated during the live part of the query. | |
liveCost | float | yes | Long-Term | Live cost calculation. | |
liveMillis | float | yes | Long-Term | Live CPU time spent since query started. | |
mapAllocations | long | yes | Long-Term | The number of bytes that were allocated during the map phase of the query. | |
mapMillis | float | yes | Long-Term | Static CPU time spent since query started. | |
Organization | Organization | Long-Term | The organization owning the query, if any. See Organization . | ||
processedEvents | long | yes | Long-Term | The number of events that were actually processed in running the query. | |
queryArgs | string | yes | Long-Term | The arguments for any paramters in the query (e.g., ?host ). | |
queryInput | string | yes | Long-Term | The query as entered by the user, including additional metadata. | |
queryPrefix | string | yes | Long-Term | The prefix of the query. | |
reduceAllocations | long | yes | Long-Term | The number of bytes that were allocated during the reduce phase of the query. | |
skippedBytes | long | yes | Long-Term | The number of bytes that were skipped as a result of not matching the search criteria. | |
StaticCost | float | yes | Long-Term | Static cost calculation. | |
status | string | yes | Long-Term | The status of the running query. | |
timeInMillis | long | yes | Long-Term | The time in milliseconds that the query has been running. | |
timeInterval | string | yes | Long-Term | The time interval for the query. | |
timeQueuedInMillis | long | yes | Long-Term | The time queued in milliseconds. | |
timeZoneOffSetMinutes | integer | yes | Long-Term | The time zone used for the time interval, specified in minutes. | |
totalAllocations | long | yes | Long-Term | The total number of bytes that were allocated during the processing of the query. | |
TotalCost | float | yes | Long-Term | Total cost calculation. | |
totalWork | integer | yes | Long-Term | The number of segments to be searched by the query and its time interval. | |
View | string | yes | Long-Term | The view or repository associated with the query. | |
workDone | integer | yes | Long-Term | The number of segments that were actually read in the processing the query. |