RunningQuery is a datatype for a query that is currently being executed.

Table: RunningQuery

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For return datatypes, this indicates that you must specify which fields you want returned in the results.
Table last updated: Mar 19, 2025
clients[Client]yes Long-TermA list of clients. See Client.
coordinatorIdstringyes Long-TermThe unique identifier of the coordinator.
deltaLiveCostfloatyes Long-TermLive cost calculation last 30 seconds.
deltaLiveMillisfloatyes Long-TermLive CPU time spent the last 30 seconds.
deltaMapMillisfloatyes Long-TermStatic CPU time spent the last 30 seconds.
deltaStaticCostfloatyes Long-TermStatic cost calculation last 30 seconds.
deltaTotalAllocationslongyes Long-TermThe change of the total number of bytes that were allocated.
deltaTotalCostfloatyes Long-TermTotal cost calculation last 30 seconds.
estimatedTotalByteslongyes Long-TermThe estimated total bytes of data that will be searched by the query.
idstringyes Long-TermThe unique identifier of the running query.
includedByteslongyes Long-TermThe number of bytes that were included in the processing of the query (i.e., the estimated minus the skipped).
initiatedBystring  Long-TermWho or what initiated the running query.
isDashboardbooleanyes Long-TermWhether the running query is used in a dashboard.
isHistoricDonebooleanyes Long-TermWhether the query of historic data has completed.
isLivebooleanyes Long-TermWhether the query is using live data.
liveAllocationslongyes Long-TermThe total number of bytes that were allocated during the live part of the query.
liveCostfloatyes Long-TermLive cost calculation.
liveMillisfloatyes Long-TermLive CPU time spent since query started.
mapAllocationslongyes Long-TermThe number of bytes that were allocated during the map phase of the query.
mapMillisfloatyes Long-TermStatic CPU time spent since query started.
organizationOrganization  Long-TermThe organization owning the query, if any. See Organization.
processedEventslongyes Long-TermThe number of events that were actually processed in running the query.
queryArgsstringyes Long-TermThe arguments for any parameters in the query (e.g., ?host ).
queryInputstringyes Long-TermThe query as entered by the user, including additional metadata.
queryPrefixstringyes Long-TermThe prefix of the query.
reduceAllocationslongyes Long-TermThe number of bytes that were allocated during the reduce phase of the query.
skippedByteslongyes Long-TermThe number of bytes that were skipped as a result of not matching the search criteria.
staticCostfloatyes Long-TermStatic cost calculation.
statusstringyes Long-TermThe status of the running query.
timeInMillislongyes Long-TermThe time in milliseconds that the query has been running.
timeIntervalstringyes Long-TermThe time interval for the query.
timeQueuedInMillislongyes Long-TermThe time queued in milliseconds.
timeZoneOffSetMinutesintegeryes Long-TermThe time zone used for the time interval, specified in minutes.
totalAllocationslongyes Long-TermThe total number of bytes that were allocated during the processing of the query.
totalCostfloatyes Long-TermTotal cost calculation.
totalWorkintegeryes Long-TermThe number of segments to be searched by the query and its time interval.
viewstringyes Long-TermThe view or repository associated with the query.
workDoneintegeryes Long-TermThe number of segments that were actually read in the processing the query.