Example Queries

The following are example filter queries against the ec_event Event Collector database view (target=AUDIT).

Description Query
Returns all events referring to process instance pvm:0a121. 
"query": { "filter": "messageCategory='PROCESS_INSTANCE' AND managedObjectId='pvm:0a121'"}
Returns all events referring to a process instance value that is defined by the ProcID late bound parameter literal.

The executeGenericQueryRequest or executeRegisteredGenericQueryRequest message must include a value for ProcID as part of the QueryOptions element. 

"query": { "filter": "messageCategory='PROCESS_INSTANCE' AND managedObjectId=::ProcID"}
Returns all events for work items generated by process instance pvm:0a126. 
"query": { "filter": "messageCategory='WORK_ITEM' AND parentObjectId='pvm:0a126'"}
Returns all events referring to process instance pvm:0a121 where the messageID is not BX_INSTANCE_PROCESS_COMPLETED. 
"query": { "filter": "messageCategory='PROCESS_INSTANCE' AND managedObjectId='pvm:0a121' AND messageId <> 'BX_INSTANCE_PROCESS_COMPLETED'"}
Returns all events for work items associated with the resource (user) Clint Hill. 
"query": { "filter": "messageCategory='WORK_ITEM' AND resourceName='Clint Hill'"}
Returns all events where the message attribute value begins with 'Start', followed by any number of characters. 
"query": { "filter": "message = 'Start*'"}
Returns all events for the current user. 
"query": { "filter": "currentUser(resourceName)"}
Returns all events referring to process instance pvm:0a121 created between 9 AM on July 10, 2017 and 5 PM July 14, 2017, inclusive. Times are local. 
"query": { "filter": "messageCategory='PROCESS_INSTANCE' AND managedObjectId = 'pvm:0a121' AND creationTime=[2017-07-10T09,2017-07-14T17]"}
Returns all events referring to process instance pvm:0a121 created between 8 AM July 10, 2017 and 6 PM July 14, 2017, exclusive. Times are Eastern Daylight Time (-04 hour offset from UTC). 
"query": { "filter": "messageCategory='PROCESS_INSTANCE' AND managedObjectId = 'pvm:0a121' AND creationTime={2017-07-10T08-04,2017-07-14T18-04}"}
Returns all events referring to process instance pvm:0a121 created between 8 AM July 10, 2017 (exclusive) and 5 PM July 14, 2017 (inclusive). Times are Indian Standard Time (+5 1/2 hour offset from UTC). 
"query": { "filter": "messageCategory='PROCESS_INSTANCE' AND managedObjectId = 'pvm:0a121' AND creationTime={2017-07-10T08+05:30,2017-07-14T17+05:30]"}

For information about dates and times being inclusive or exclusive, based on bracket type, see Using DateTime Literals.