awk pattern:                                                     Sep18 10:00 to Sep18 11:00 (1h)  Edit   Menu
       10▀



          ▄▖ ▄▖
          ▘ 10:00        ▘ 10:10        ▘ 10:20        ▘ 10:30        ▘ 10:40        ▘ 10:50
time (UTC)         lstream            message                                    hostname pid program
    < MOAR ! >
Sep18 10:00:00.000 testhost-corrupted before                                     testhost 1   app
--- MALFORMED ---  testhost-corrupted Sep 18 10:01:00 testhost app[1]: corrupted
Sep18 10:02:00.000 testhost-corrupted after                                      testhost 1   app
















idle 🖳 01 🖳 00 🖳 00 | testhost-corrupted                                                             3 / 3 / 3
Query took: XXXXXXXXXX; 3 warnings; results may be incomplete; use :querywarnings to see details
