Edit

Share via


The timespan data type

Applies to: ✅ Microsoft FabricAzure Data ExplorerAzure MonitorMicrosoft Sentinel

The timespan data type represents a time interval.

The timespan and time data types are equivalent.

timespan literals

To specify a timespan literal, use one of the following syntax options:

Syntax Description Example Length of time
nd A time interval represented by one or more digits followed by d for days. 2d 2 days
nh A time interval represented by one or more digits followed by h for hours. 1.5h 1.5 hours
nm A time interval represented by one or more digits followed by m for minutes. 30m 30 minutes
ns A time interval represented by one or more digits followed by s for seconds. 10s 10 seconds
nms A time interval represented by one or more digits followed by ms for milliseconds. 100ms 100 milliseconds
nmicrosecond A time interval represented by one or more digits followed by microsecond. 10microsecond 10 microseconds
ntick A time interval represented by one or more digits followed by tick to indicate nanoseconds. 1tick 100 ns
timespan(n seconds) A time interval in seconds. timespan(15 seconds) 15 seconds
timespan(n) A time interval in days. timespan(2) 2 days
timespan(days.hours:minutes:seconds.milliseconds) A time interval in days, hours, minutes, and seconds passed. timespan(0.12:34:56.7) 0d+12h+34m+56.7s
timespan(null) Represents the null value.

Note

Week is not a supported length of time. For example, using nw is not supported.

Learn more about syntax conventions.

timespan operators

Two values of type timespan may be added, subtracted, and divided. The last operation returns a value of type real representing the fractional number of times one value can fit the other.

Examples

The following example calculates how many seconds are in a day in several ways:

print
    result1 = 1d / 1s,
    result2 = time(1d) / time(1s),
    result3 = 24 * 60 * time(00:01:00) / time(1s)

This example converts the number of seconds in a day (represented by an integer value) to a timespan unit:

print 
    seconds = 86400
| extend t = seconds * 1s