## `$m.<field>` Schema

`$m.<field>`

Metadata and runtime characteristics sourced from log and span records, used in enrichment and analytics contexts.

branchid

Branch identifier for the source system.\
Type: `string`\
Dataset: `logs`

cxEventId

Coralogix event identifier for a span.\
Type: `string`\
Dataset: `spans`

duration

Duration of the span in time units.\
Type: `number`\
Dataset: `spans`

endTime

Span end time.\
Type: `number`\
Dataset: `spans`

ingressTimestamp

Ingestion time into the logging system.\
Type: `timestamp`\
Dataset: `logs`

logid

Unique identifier for a log record.\
Type: `string`\
Dataset: `logs`

priorityclass

Log priority classification.\
Type: `string`\
Dataset: `logs`

processingOutputTimestampMicros

Processing timestamp in microseconds.\
Type: `number`\
Dataset: `logs`

processingOutputTimestampNanos

Processing timestamp in nanoseconds.\
Type: `number`\
Dataset: `logs`

severity

Severity level of the log.\
Type: `Severity`\
Dataset: `logs`

templateid

Template identifier for log parsing.\
Type: `string`\
Dataset: `logs`

timestamp

Timestamp of the log event or start time of the span.\
Type: `timestamp`\
Dataset: `logs`, `spans`

timestampMicros

Timestamp in microseconds.\
Type: `number`\
Dataset: `logs`

timestampMillis

Span start time in milliseconds.\
Type: `number`\
Dataset: `spans`

### Possible `$m` keys

| keypath                            | json_type | dataset     |
| ---------------------------------- | --------- | ----------- |
| $m.branchid                        | string    | logs        |
| $m.cxEventId                       | string    | spans       |
| $m.duration                        | number    | spans       |
| $m.endTime                         | number    | spans       |
| $m.ingressTimestamp                | timestamp | logs        |
| $m.logid                           | string    | logs        |
| $m.priorityclass                   | string    | logs        |
| $m.processingOutputTimestampMicros | number    | logs        |
| $m.processingOutputTimestampNanos  | number    | logs        |
| $m.severity                        | Severity  | logs        |
| $m.templateid                      | string    | logs        |
| $m.timestamp                       | timestamp | logs, spans |
| $m.timestampMicros                 | number    | logs        |
| $m.timestampMillis                 | number    | spans       |

______________________________________________________________________

## `$l.<field>` Schema

`\$l.<field>`

Label metadata associated with the source or origin of a log or span.

applicationname

Name of the application that emitted the log or span.\
Type: `string`\
Dataset: `logs`, `spans`

category

Logical category or classification of the log source.\
Type: `string`\
Dataset: `logs`

computername

Hostname or identifier of the machine where the log originated.\
Type: `string`\
Dataset: `logs`

operationName

Span operation name representing the traced action.\
Type: `string`\
Dataset: `spans`

serviceName

Service name associated with the span's origin.\
Type: `string`\
Dataset: `spans`

subsystemname

Subsystem identifier within the application or service.\
Type: `string`\
Dataset: `logs`, `spans`

### Possible `$l` keys

| keypath            | json_type | dataset     |
| ------------------ | --------- | ----------- |
| $l.applicationname | string    | logs, spans |
| $l.category        | string    | logs        |
| $l.computername    | string    | logs        |
| $l.operationName   | string    | spans       |
| $l.serviceName     | string    | spans       |
| $l.subsystemname   | string    | logs, spans |

______________________________________________________________________

## `$p.<field>` Schema

$p.

Parameter fields representing time window and resolution hints.

timeRange

Time bounding parameters and query resolution guidance.

startTime

The inclusive lower bound of the query time range.\
Type: `timestamp`\
Dataset: `logs`, `spans`

endTime

The exclusive upper bound of the query time range.\
Type: `timestamp`\
Dataset: `logs`, `spans`

suggestedInterval

Suggested resolution interval for aggregations (e.g. histogram buckets).\
Type: `interval`\
Dataset: `logs`, `spans`

### Possible `$p` keys

| keypath                        | json_type | dataset     |
| ------------------------------ | --------- | ----------- |
| $p.timeRange.endTime           | timestamp | logs, spans |
| $p.timeRange.startTime         | timestamp | logs, spans |
| $p.timeRange.suggestedInverval | interval  | logs, spans |