select 
toStartOfInterval(fromUnixTimestamp64Nano(timestamp), INTERVAL 30 MINUTE) AS interval, 
toFloat64(count()) as value 
FROM signoz_logs.distributed_logs  
WHERE timestamp BETWEEN {{.start_timestamp_nano}} AND {{.end_timestamp_nano}}
GROUP BY interval;

-- available variables:
-- 	{{.start_timestamp_nano}}
-- 	{{.end_timestamp_nano}}

-- required columns (or alias):
-- 	value
-- 	interval

Hello please i want to set an alert from the logs that contain error i tried this but didnt work

SELECT toStartOfInterval(fromUnixTimestamp64Nano(timestamp), INTERVAL 1 MINUTE) AS interval, 
toFloat64(count()) AS value 
FROM signoz_logs.logs  
WHERE (timestamp > toUnixTimestamp64Nano(now64() - INTERVAL 30 MINUTE) AND
       body ILIKE '%error%')

GROUP BY interval 
ORDER BY interval ASC;