Time Functions¶
Format Timestamp¶
* | formatTime("%Y-%m-%d %H:%M", field=timestamp, timezone=UTC)
Current Time¶
* | now()
* | now(current_time)
Time Bucketing¶
* | bucket(span=1h, function=count())
* | bucket(span=5m, function=sum(bytes))
Supported spans: s (second), m (minute), h (hour), d (day), w (week).