System fields are fields that occur with every event ingested by the system. The system fields describe the data and include
The timestamp is broken up into the following system fields.
These date fields can be used to group searches by time boundaries. For example, this searches for all the unique client ip addresses for each day.
| _type.equals(www) _dayOfMonth.countUnique(clientIp,)