Otherwise, the date is assigned according to the time that the message was received by Scalyrs servers.

Api 14A Latest Edition Of Time Full Description Of

See Query Language for a full description of the Scalyr query language.

Different parts of your search text such as fields, operators, and values are highlighted in order to visually differentiate them.

For example, in the search text bytes 5000, each of the three components will be a different color.

You can enter a time (e.g.

AM ), a date ( May 23 ), or date and time ( 5142016 2:00 PM ), using a wide variety of date and time formats.

You can also enter shortcuts like 5h to indicate five hours ago.

You can also enter a shortcut beginning with to specify the amount of time youd like to search, e.g.

From time.

If youre using Kubernetes these will allow you to search cluster and controller name, respectively.

You can use a single as a wildcard at the beginning or end (but not the middle) of the server or log file name.

By default, it shows the top 100 fields, arranged alphabetically in a scrollable window (All Fields).

Click the dropdown and switch to Top Fields to view the most common fields first.

You can also use the and symbols to include (or exclude) these values from your search.

Note that these are often estimates due to sampling (see (7d) below).

In the first pass (first bullet point), we query a 1 subsample to estimate the total number of matches.

In the second pass (second bullet point), we sample the data with a rate based on information obtained in the first pass.).

The dotted line shows a smoothed distribution of actual log volume over that time period.

Click anywhere in the bar chart to jump to that point in time.

You can scroll horizontally to view long messages, and vertically to move through your selected time range.

For example, you may want to have the value of a field called userId link to that users page in your company directory.

Otherwise, the timestamp is assigned according to the time that the message was received by Scalyrs servers.

Server-specific fields are grouped and listed below the others.

If you choose to view them in a table, you will need to select which fields to show.

If the parser was able to identify a timestamp in the message, the date is extracted from value.