Access mechanisms

`$m.<field>` Schema

$m.<field>

Metadata and runtime characteristics sourced from log and span records, used in enrichment and analytics contexts.

branchid

Branch identifier for the source system.
Type: string
Dataset: logs

cxEventId

Coralogix event identifier for a span.
Type: string
Dataset: spans

duration

Duration of the span in time units.
Type: number
Dataset: spans

endTime

Span end time.
Type: number
Dataset: spans

ingressTimestamp

Ingestion time into the logging system.
Type: timestamp
Dataset: logs

logid

Unique identifier for a log record.
Type: string
Dataset: logs

priorityclass

Log priority classification.
Type: string
Dataset: logs

processingOutputTimestampMicros

Processing timestamp in microseconds.
Type: number
Dataset: logs

processingOutputTimestampNanos

Processing timestamp in nanoseconds.
Type: number
Dataset: logs

severity

Severity level of the log.
Type: Severity
Dataset: logs

templateid

Template identifier for log parsing.
Type: string
Dataset: logs

timestamp

Timestamp of the log event or start time of the span.
Type: timestamp
Dataset: logs, spans

timestampMicros

Timestamp in microseconds.
Type: number
Dataset: logs

timestampMillis

Span start time in milliseconds.
Type: number
Dataset: spans

Possible `$m` keys

keypath	json_type	dataset
$m.branchid	string	logs
$m.cxEventId	string	spans
$m.duration	number	spans
$m.endTime	number	spans
$m.ingressTimestamp	timestamp	logs
$m.logid	string	logs
$m.priorityclass	string	logs
$m.processingOutputTimestampMicros	number	logs
$m.processingOutputTimestampNanos	number	logs
$m.severity	Severity	logs
$m.templateid	string	logs
$m.timestamp	timestamp	logs, spans
$m.timestampMicros	number	logs
$m.timestampMillis	number	spans

`$l.<field>` Schema

\$l.<field>

Label metadata associated with the source or origin of a log or span.

applicationname

Name of the application that emitted the log or span.
Type: string
Dataset: logs, spans

Possible `$l` keys

keypath	json_type	dataset
$l.applicationname	string	logs, spans
$l.category	string	logs
$l.computername	string	logs
$l.operationName	string	spans
$l.serviceName	string	spans
$l.subsystemname	string	logs, spans

`$p.<field>` Schema

$p.

Parameter fields representing time window and resolution hints.

timeRange

Time bounding parameters and query resolution guidance.

startTime

The inclusive lower bound of the query time range.
Type: timestamp
Dataset: logs, spans

endTime

The exclusive upper bound of the query time range.
Type: timestamp
Dataset: logs, spans

suggestedInterval

Suggested resolution interval for aggregations (e.g. histogram buckets).
Type: interval
Dataset: logs, spans

Possible `$p` keys

keypath	json_type	dataset
$p.timeRange.endTime	timestamp	logs, spans
$p.timeRange.startTime	timestamp	logs, spans
$p.timeRange.suggestedInverval	interval	logs, spans

Types

Next Limitations

Home

User Guides

DataPrime

Integrations

OpenTelemetry

Developer Portal

Access mechanisms

$m.<field> Schema

Possible $m keys

$l.<field> Schema

Possible $l keys

$p.<field> Schema

Possible $p keys