Description

Introduce the function TBUCKET(<time interval>) which applies grouping on the @timestamp field, truncating its value to the specified granularity:

• TBUCKET(1h) is equivalent to BUCKET(@timestamp, "1 hour")
• TBUCKET(7d) is equivalent to BUCKET(@timestamp, "7 days")