Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FEATURE]support earliest/latest date-time functions #3173

Open
YANG-DB opened this issue Nov 28, 2024 · 1 comment
Open

[FEATURE]support earliest/latest date-time functions #3173

YANG-DB opened this issue Nov 28, 2024 · 1 comment
Labels
enhancement New feature or request PPL Piped processing language

Comments

@YANG-DB
Copy link
Member

YANG-DB commented Nov 28, 2024

Is your feature request related to a problem?
As a PPL query syntax for easily supporting predefined simple time ranges such as:
earliest week, latest day, latest month, earliest hour.

Supporting for the predefined time units:

  • second - s
  • minute - m
  • hour - h
  • day - d
  • week - w
  • month - mnt
  • quarter - qrt
  • year - yr

What solution would you like?
source = logs | where status > 200 AND (earliest=-24h AND latest<@d)
source = logs | where status > 200 AND (earliest=-5d@w1 AND latest=@w6)
source = logs | where status > 200 AND (earliest='2023-11-15:20:00:00' AND latest='2023-11-22:20:00:00')

@YANG-DB YANG-DB added enhancement New feature or request untriaged PPL Piped processing language labels Nov 28, 2024
@YANG-DB YANG-DB moved this to Todo in PPL Commands Nov 28, 2024
@YANG-DB YANG-DB assigned YANG-DB and unassigned YANG-DB Nov 28, 2024
@YANG-DB YANG-DB moved this from Todo to In Progress in PPL Commands Dec 12, 2024
@dblock dblock removed the untriaged label Dec 16, 2024
@dblock
Copy link
Member

dblock commented Dec 16, 2024

[Catch All Triage - 1, 2, 3]

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request PPL Piped processing language
Projects
Status: In Progress
Development

No branches or pull requests

2 participants