from
Class: source · Streaming: row-at-a-time
Scan stage. Only valid first in a pipeline. Accepts bracket time ranges and search-sugar terms (RFC-002 §3.1).
Signature
| from <sources>
Positional Arguments
| Name | Type | Required | Description |
|---|---|---|---|
sources | field_patterns | Yes | source names, globs, !-excludes, *, $cte refs, or inline row objects; optional [range] suffix; optional trailing search-sugar terms |
Examples
from nginx[-1h] timeout status>=500
from logs*,!logs-debug*[-7d..-1d]
from $errs
from [{level: "ERROR", w: 3}, {level: "WARN", w: 2}]
Generated from the LynxFlow registry. See RFC-002 for the full language specification.