dataplan.quota_events
The dataplan.quota_events dataset is a stream of quota-related events emitted by the platform, quota-definition changes, threshold breaches, ingestion blocks, Pay-as-you-go activations, and resets. Query it to track how your team's quota is allocated and consumed over time, and to investigate when and why limits are approached, exceeded, or reset.
Query the dataset
dataplan.quota_events is a system dataset maintained by Coralogix. Query it with DataPrime:
source system/"dataplan.quota_events"
Like other system datasets, its events count toward your daily quota; volumes are typically small compared to your user data.
Schema description
Every event shares a common envelope and carries one event-type-specific payload, selected by $d.quotaEventType.
| Field | Type | Description |
|---|---|---|
$d.id | string (UUID) | Unique identifier for the event. |
$d.correlationId | string (UUID) | Correlation ID linking related events. |
$d.teamId | integer | The team the event belongs to. |
$d.actorDetails | object | Who or what triggered the event (actorType, and userId when applicable). |
$d.authDetails | object | null | Authentication details (authType), when applicable. |
$d.quotaEventType | string (enum) | Event-type discriminator. Determines which payload object is populated. See Event types. |
Event types
The value of $d.quotaEventType selects the populated payload object:
quotaEventType | Payload object | Description |
|---|---|---|
quotaDefChanged | $d.quotaDefChanged | A quota definition (entity-type allocation rule) was created, updated, or deleted, with before/after rule state. |
dataUsageThresholdReached | $d.dataUsageThresholdReached | A usage threshold (for example, the warning level) was reached for a team, entity type, or TCO policy. |
dataUsageBlocked | $d.dataUsageBlocked | Ingestion was blocked after quota was exhausted, for a team or entity type. |
payAsYouGoKickedIn | $d.payAsYouGoKickedIn | Pay-as-you-go overflow activated for a team or entity type. |
dataUsageReset | $d.dataUsageReset | A TCO-policy quota window was reset. |
Full field reference
Each payload object carries extensive nested fields: quota allocations, used and limit units, Pay-as-you-go context, and TCO-policy details. The table lists every field in the dataset schema, including the payload objects for all event types.
Show full field reference
| Field | Type | Required | Description |
|---|---|---|---|
$d | object | Yes | Quota allocation, threshold, block, Pay-as-you-go, and reset events emitted by data-usage into the system quota_events dataset. |
$d.actorDetails | object | Yes | |
$d.actorDetails.actorType | string | Yes | |
$d.actorDetails.userId | string | No | |
$d.authDetails | object, nullable | No | |
$d.authDetails.authType | string | No | |
$d.correlationId | string (uuid) | Yes | |
$d.dataUsageBlocked | object | No | |
$d.dataUsageBlocked.dataUsageScope | string | Yes | One of: teamDataUsageScope, entityTypeDataUsageScope. |
$d.dataUsageBlocked.entityTypeDataUsageScope | object | No | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context | object | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated | array of object | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].rule | object | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].rule.allocationPercentage | number, nullable | No | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].rule.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].rule.allocationUnits | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].rule.id | string (uuid) | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].rule.overflowEnabled | boolean | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.allocated[].usedUnits | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.payAsYouGo | object | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.payAsYouGo.active | boolean | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.payAsYouGo.enabled | boolean | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.payAsYouGo.multiplier | number, nullable | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.teamInfo | object | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.teamInfo.dailyGraceLimitUnits | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.teamInfo.dailyQuotaUnits | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.teamInfo.usageUnits | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.unallocatedEntityTypes | object | No | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.unallocatedEntityTypes.allocationPercentage | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes | array of object | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.dataUsageBlocked.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes[].usageUnits | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.dataUsageBlocked.entityTypeDataUsageScope.entityTypeCategory | string | No | One of: user, system. |
$d.dataUsageBlocked.entityTypeDataUsageScope.overflowActive | boolean | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.rule | object, nullable | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.rule.allocationPercentage | number, nullable | No | |
$d.dataUsageBlocked.entityTypeDataUsageScope.rule.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.dataUsageBlocked.entityTypeDataUsageScope.rule.allocationUnits | number | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.rule.id | string (uuid) | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.rule.overflowEnabled | boolean | Yes | |
$d.dataUsageBlocked.entityTypeDataUsageScope.thresholdName | string | No | Value: warning. |
$d.dataUsageBlocked.entityTypeDataUsageScope.thresholdUnits | number | No | |
$d.dataUsageBlocked.entityTypeDataUsageScope.usedUnits | number | Yes | |
$d.dataUsageBlocked.teamDataUsageScope | object | No | Team payload for the monthly enforcement cycle: the monthly quota under its own name plus the enforced calendar-month window. No grace field — the monthly cycle blocks at exactly the quota. |
$d.dataUsageBlocked.teamDataUsageScope.context | object | No | |
$d.dataUsageBlocked.teamDataUsageScope.context.payAsYouGo | object | No | |
$d.dataUsageBlocked.teamDataUsageScope.context.payAsYouGo.active | boolean | No | |
$d.dataUsageBlocked.teamDataUsageScope.context.payAsYouGo.enabled | boolean | No | |
$d.dataUsageBlocked.teamDataUsageScope.context.payAsYouGo.multiplier | number | No | |
$d.dataUsageBlocked.teamDataUsageScope.dailyGraceLimitUnits | number | No | |
$d.dataUsageBlocked.teamDataUsageScope.dailyQuotaUnits | number | No | |
$d.dataUsageBlocked.teamDataUsageScope.planCycle | object | No | The quota cycle this event enforces and its calendar window (UTC dates, inclusive). For the daily cycle startDate equals endDate. |
$d.dataUsageBlocked.teamDataUsageScope.planCycle.cycle | string | No | One of: daily, monthly. |
$d.dataUsageBlocked.teamDataUsageScope.planCycle.endDate | string (date) | No | |
$d.dataUsageBlocked.teamDataUsageScope.planCycle.startDate | string (date) | No | |
$d.dataUsageBlocked.teamDataUsageScope.thresholdName | string | No | Value: warning. |
$d.dataUsageBlocked.teamDataUsageScope.thresholdUnits | number | No | |
$d.dataUsageBlocked.teamDataUsageScope.usedUnits | number | No | |
$d.dataUsageBlocked.teamDataUsageScope.monthlyQuotaUnits | number | No | |
$d.dataUsageReset | object | No | |
$d.dataUsageReset.resetScope | string | Yes | Value: tcoPolicyResetScope. |
$d.dataUsageReset.tcoPolicyResetScope | object | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.dailyQuotaUnits | number | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.dataset | object | No | |
$d.dataUsageReset.tcoPolicyResetScope.dataset.dataset | string | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.dataset.dataspace | string | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.priorityAfter | string | Yes | One of: low, medium, high, blocked. |
$d.dataUsageReset.tcoPolicyResetScope.priorityBefore | string | Yes | One of: low, medium, high, blocked. |
$d.dataUsageReset.tcoPolicyResetScope.resetWindow | object | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.resetWindow.end | string (date-time) | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.resetWindow.interval | string | Yes | Value: daily. |
$d.dataUsageReset.tcoPolicyResetScope.resetWindow.start | string (date-time) | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.targetType | string | No | Value: dataset. |
$d.dataUsageReset.tcoPolicyResetScope.tcoPolicyId | string (uuid) | Yes | |
$d.dataUsageReset.tcoPolicyResetScope.usedUnits | number | Yes | |
$d.dataUsageThresholdReached | object | No | |
$d.dataUsageThresholdReached.dataUsageScope | string | Yes | One of: teamDataUsageScope, entityTypeDataUsageScope, tcoPolicyDataUsageScope. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope | object | No | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context | object | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated | array of object | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].rule | object | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].rule.allocationPercentage | number, nullable | No | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].rule.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].rule.allocationUnits | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].rule.id | string (uuid) | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].rule.overflowEnabled | boolean | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.allocated[].usedUnits | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.payAsYouGo | object | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.payAsYouGo.active | boolean | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.payAsYouGo.enabled | boolean | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.payAsYouGo.multiplier | number, nullable | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.teamInfo | object | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.teamInfo.dailyGraceLimitUnits | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.teamInfo.dailyQuotaUnits | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.teamInfo.usageUnits | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.unallocatedEntityTypes | object | No | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.unallocatedEntityTypes.allocationPercentage | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes | array of object | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes[].usageUnits | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.entityTypeCategory | string | No | One of: user, system. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.overflowActive | boolean | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.rule | object, nullable | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.rule.allocationPercentage | number, nullable | No | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.rule.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.rule.allocationUnits | number | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.rule.id | string (uuid) | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.rule.overflowEnabled | boolean | Yes | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.thresholdName | string | No | Value: warning. |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.thresholdUnits | number | No | |
$d.dataUsageThresholdReached.entityTypeDataUsageScope.usedUnits | number | Yes | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope | object | No | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.dailyQuotaUnits | number | Yes | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.dataset | object | No | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.dataset.dataset | string | Yes | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.dataset.dataspace | string | Yes | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.priorityAfter | string | Yes | One of: low, medium, high, blocked. |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.priorityBefore | string | Yes | One of: low, medium, high, blocked. |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.targetType | string | No | Value: dataset. |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.tcoPolicyId | string (uuid) | Yes | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.thresholdPercentage | number | Yes | |
$d.dataUsageThresholdReached.tcoPolicyDataUsageScope.usedUnits | number | Yes | |
$d.dataUsageThresholdReached.teamDataUsageScope | object | No | Team payload for the monthly enforcement cycle: the monthly quota under its own name plus the enforced calendar-month window. No grace field — the monthly cycle blocks at exactly the quota. |
$d.dataUsageThresholdReached.teamDataUsageScope.context | object | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.context.payAsYouGo | object | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.context.payAsYouGo.active | boolean | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.context.payAsYouGo.enabled | boolean | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.context.payAsYouGo.multiplier | number | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.dailyGraceLimitUnits | number | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.dailyQuotaUnits | number | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.planCycle | object | No | The quota cycle this event enforces and its calendar window (UTC dates, inclusive). For the daily cycle startDate equals endDate. |
$d.dataUsageThresholdReached.teamDataUsageScope.planCycle.cycle | string | No | One of: daily, monthly. |
$d.dataUsageThresholdReached.teamDataUsageScope.planCycle.endDate | string (date) | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.planCycle.startDate | string (date) | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.thresholdName | string | No | Value: warning. |
$d.dataUsageThresholdReached.teamDataUsageScope.thresholdUnits | number | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.usedUnits | number | No | |
$d.dataUsageThresholdReached.teamDataUsageScope.monthlyQuotaUnits | number | No | |
$d.id | string (uuid) | Yes | |
$d.payAsYouGoKickedIn | object | No | |
$d.payAsYouGoKickedIn.dataUsageScope | string | Yes | One of: teamDataUsageScope, entityTypeDataUsageScope. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope | object | No | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules | array of object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].entityTypeCategory | string | No | One of: user, system. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].rule | object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].rule.allocationPercentage | number, nullable | No | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].rule.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].rule.allocationUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].rule.id | string (uuid) | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].rule.overflowEnabled | boolean | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.allocatedOverflowingRules[].usedUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context | object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated | array of object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].rule | object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].rule.allocationPercentage | number, nullable | No | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].rule.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].rule.allocationUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].rule.id | string (uuid) | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].rule.overflowEnabled | boolean | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.allocated[].usedUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.payAsYouGo | object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.payAsYouGo.active | boolean | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.payAsYouGo.enabled | boolean | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.payAsYouGo.multiplier | number, nullable | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.teamInfo | object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.teamInfo.dailyGraceLimitUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.teamInfo.dailyQuotaUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.teamInfo.usageUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.unallocatedEntityTypes | object | No | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.unallocatedEntityTypes.allocationPercentage | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes | array of object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.context.unallocatedEntityTypes.entityTypes[].usageUnits | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.unallocatedEntityTypes | object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.unallocatedEntityTypes.allocationPercentage | number | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.unallocatedEntityTypes.entityTypes | array of object | Yes | |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.unallocatedEntityTypes.entityTypes[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.payAsYouGoKickedIn.entityTypeDataUsageScope.unallocatedEntityTypes.entityTypes[].usageUnits | number | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope | object | No | |
$d.payAsYouGoKickedIn.teamDataUsageScope.context | object | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.context.payAsYouGo | object | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.context.payAsYouGo.active | boolean | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.context.payAsYouGo.enabled | boolean | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.context.payAsYouGo.multiplier | number, nullable | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.dailyGraceLimitUnits | number | No | |
$d.payAsYouGoKickedIn.teamDataUsageScope.dailyQuotaUnits | number | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.planCycle | object | No | Optional until the emitter starts stamping it on daily events; events published before then omit it. |
$d.payAsYouGoKickedIn.teamDataUsageScope.planCycle.cycle | string | Yes | One of: daily, monthly. |
$d.payAsYouGoKickedIn.teamDataUsageScope.planCycle.endDate | string (date) | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.planCycle.startDate | string (date) | Yes | |
$d.payAsYouGoKickedIn.teamDataUsageScope.thresholdName | string | No | Value: warning. |
$d.payAsYouGoKickedIn.teamDataUsageScope.thresholdUnits | number | No | |
$d.payAsYouGoKickedIn.teamDataUsageScope.usedUnits | number | Yes | |
$d.quotaDefChanged | object | No | |
$d.quotaDefChanged.entityTypeBased | object | No | |
$d.quotaDefChanged.entityTypeBased.action | string | Yes | One of: Created, Updated, Deleted. |
$d.quotaDefChanged.entityTypeBased.after | object | No | |
$d.quotaDefChanged.entityTypeBased.after.allocationPercentage | number, nullable | Yes | |
$d.quotaDefChanged.entityTypeBased.after.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.quotaDefChanged.entityTypeBased.after.allocationUnits | number | Yes | |
$d.quotaDefChanged.entityTypeBased.after.cxManaged | boolean | Yes | |
$d.quotaDefChanged.entityTypeBased.after.overflow | boolean | Yes | |
$d.quotaDefChanged.entityTypeBased.before | object | No | |
$d.quotaDefChanged.entityTypeBased.before.allocationPercentage | number, nullable | Yes | |
$d.quotaDefChanged.entityTypeBased.before.allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.quotaDefChanged.entityTypeBased.before.allocationUnits | number | Yes | |
$d.quotaDefChanged.entityTypeBased.before.cxManaged | boolean | Yes | |
$d.quotaDefChanged.entityTypeBased.before.overflow | boolean | Yes | |
$d.quotaDefChanged.entityTypeBased.context | object | Yes | |
$d.quotaDefChanged.entityTypeBased.context.allocated | array of object | Yes | |
$d.quotaDefChanged.entityTypeBased.context.allocated[].allocationPercentage | number, nullable | Yes | |
$d.quotaDefChanged.entityTypeBased.context.allocated[].allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.quotaDefChanged.entityTypeBased.context.allocated[].allocationUnits | number | Yes | |
$d.quotaDefChanged.entityTypeBased.context.allocated[].cxManaged | boolean | Yes | |
$d.quotaDefChanged.entityTypeBased.context.allocated[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.quotaDefChanged.entityTypeBased.context.allocated[].overflow | boolean | Yes | |
$d.quotaDefChanged.entityTypeBased.context.allocated[].ruleId | string (uuid) | Yes | |
$d.quotaDefChanged.entityTypeBased.context.bundles | array of object | No | Entity-type bundles in force for the team. Omitted for teams with no bundles, so not required. |
$d.quotaDefChanged.entityTypeBased.context.bundles[].bundleId | string (uuid) | Yes | |
$d.quotaDefChanged.entityTypeBased.context.bundles[].bundleName | string | Yes | Display name, for example AI UNITS. |
$d.quotaDefChanged.entityTypeBased.context.bundles[].bundleUnits | number | Yes | |
$d.quotaDefChanged.entityTypeBased.context.bundles[].cxManaged | boolean | Yes | True when Coralogix owns the bundle rather than the customer. |
$d.quotaDefChanged.entityTypeBased.context.bundles[].entityTypes | array of string | Yes | |
$d.quotaDefChanged.entityTypeBased.context.teamQuotaUnits | number | Yes | |
$d.quotaDefChanged.entityTypeBased.context.unallocated | object | Yes | |
$d.quotaDefChanged.entityTypeBased.context.unallocated.entityTypes | array of string | Yes | |
$d.quotaDefChanged.entityTypeBased.context.unallocated.unallocatedPercentage | number | Yes | |
$d.quotaDefChanged.entityTypeBased.entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.quotaDefChanged.entityTypeBased.ruleId | string (uuid) | Yes | |
$d.quotaDefChanged.quotaDefType | string | Yes | One of: entityTypeBased, quotaEntityTypeBundle. |
$d.quotaDefChanged.quotaEntityTypeBundle | object | No | |
$d.quotaDefChanged.quotaEntityTypeBundle.action | string | Yes | One of: Created, Updated, Deleted. |
$d.quotaDefChanged.quotaEntityTypeBundle.after | object | No | |
$d.quotaDefChanged.quotaEntityTypeBundle.after.bundleUnits | number | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.after.cxManaged | boolean | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.after.entityTypes | array of string | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.before | object | No | |
$d.quotaDefChanged.quotaEntityTypeBundle.before.bundleUnits | number | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.before.cxManaged | boolean | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.before.entityTypes | array of string | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.bundleId | string (uuid) | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.bundleName | string | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context | object | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated | array of object | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated[].allocationPercentage | number, nullable | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated[].allocationType | string | Yes | One of: percentage, lockedUnits. |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated[].allocationUnits | number | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated[].cxManaged | boolean | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated[].entityType | string | Yes | Metamodel entity type id such as logs, spans, metrics, browserLogs, olly, quotaEvents, or usageEvents. |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated[].overflow | boolean | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.allocated[].ruleId | string (uuid) | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.bundles | array of object | No | Entity-type bundles in force for the team. Omitted for teams with no bundles, so not required. |
$d.quotaDefChanged.quotaEntityTypeBundle.context.bundles[].bundleId | string (uuid) | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.bundles[].bundleName | string | Yes | Display name, for example AI UNITS. |
$d.quotaDefChanged.quotaEntityTypeBundle.context.bundles[].bundleUnits | number | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.bundles[].cxManaged | boolean | Yes | True when Coralogix owns the bundle rather than the customer. |
$d.quotaDefChanged.quotaEntityTypeBundle.context.bundles[].entityTypes | array of string | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.teamQuotaUnits | number | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.unallocated | object | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.unallocated.entityTypes | array of string | Yes | |
$d.quotaDefChanged.quotaEntityTypeBundle.context.unallocated.unallocatedPercentage | number | Yes | |
$d.quotaEventType | string | Yes | Discriminator. Known values are quotaDefChanged, dataUsageThresholdReached, dataUsageBlocked, payAsYouGoKickedIn, and dataUsageReset. |
$d.teamId | integer | Yes | |
$l | map | Yes | User labels: free-form string-to-string map |
$l.<key> | string | No | |
$m | object | Yes | Engine metadata |
$m.cxEventId | string (uuid) | Yes | Globally unique event id |
$m.ingressTimestamp | string (date-time) | Yes | Time the event was ingested |
$m.priorityClass | string | Yes | Defines the feature-set enabled for the event One of: high, medium, low. |
$m.severity | string | Yes | Event severity level One of: Verbose, Debug, Info, Warning, Error, Critical. |
$m.timestamp | string (date-time) | Yes | Event timestamp |
Example queries
Event count by type over the last 24 hours:
source system/"dataplan.quota_events"
| filter $m.timestamp > now() - 24h
| groupby $d.quotaEventType aggregate count() as events
| orderby events desc
Ingestion-block events for your team:
source system/"dataplan.quota_events"
| filter $d.quotaEventType == "dataUsageBlocked"
| choose $m.timestamp, $d.teamId, $d.dataUsageBlocked
Next steps
- Manage dataset access and ingestion in Dataset management.
- Analyze raw consumption with
dataplan.usage_events. - Review limit enforcement with
labs.limitViolations.
Last updated on