I am using NRQL to query my events within a time range. My query looks like select (a, b, c) from table where (c in (‘1’, ‘2’)) since time1 until time2 limit 1000. When I change the query to (c in (‘1’)) I get 500 events, and when I do (c in (‘2’)) I get 900 events. When I combine both (c in (‘1’, ‘2’)) I get 1000 events, which is correct since the total number of records 1400 is greater than the limit. When I use the time-stamp of the most recent event (events are returned ordered by time-stamp descending) as my starting time (since parameter), I expect to get the remaining 400 events. However, I am getting only a few more events. With this limitation, I am unable to get all my events.
A workaround is to make two separate queries c=‘1’ and c=‘2’. It just happens to be less efficient for my use case.
New Relic edit
- I want this, too
- I have more info to share (reply below)
- I have a solution for this
We take feature ideas seriously and our product managers review every one when plotting their roadmaps. However, there is no guarantee this feature will be implemented. This post ensures the idea is put on the table and discussed though. So please vote and share your extra details with our team.