Operators

The field types in a dataset determine which arithmetic operations are valid.

Parentheses control evaluation order:

WHERE accountTag = '<ACCOUNT_TAG>'
  AND timestamp >= NOW() - INTERVAL '1' HOUR
  AND (edgeResponseStatus = 429 OR edgeResponseStatus >= 500)

Tenancy predicates are an exception. Keep accountTag and zoneTag predicates at the top level and join them with AND.

Use IN or NOT IN to compare a scalar expression with a non-empty list:

edgeResponseStatus IN (403, 404, 429)

NOT IN is not supported for account or zone tenancy predicates.

Use BETWEEN to test an inclusive range. NOT BETWEEN negates the test:

timestamp BETWEEN '2026-09-15T00:00:00Z' AND '2026-09-15T01:00:00Z'
edgeResponseStatus BETWEEN 400 AND 499

Use LIKE and NOT LIKE for case-sensitive pattern matching. Use ILIKE and NOT ILIKE for case-insensitive matching. In a pattern, % matches any sequence of characters and _ matches one character.

clientRequestHttpHost ILIKE 'api.%'

LIKE ... ESCAPE is not supported.

Use IS NULL or IS NOT NULL to test whether an expression is null:

originResponseStatus IS NOT NULL

This does not make a standalone NULL literal valid in other expressions.

The SQL API supports searched and simple CASE expressions:

CASE
  WHEN edgeResponseStatus >= 500 THEN 'server error'
  WHEN edgeResponseStatus >= 400 THEN 'client error'
  ELSE 'other'
END

CASE edgeResponseStatus
  WHEN 200 THEN 'ok'
  ELSE 'other'
END