I have sink setup where our GCP logs are streamed to BQ.
These logs are separated by date where the end of the log file is YYYYMMDD for example:
LogName20220801, LogName20220802 (August 1, August 2 etc).
I would like to query a month’s worth of logs, however when I add more than one of these in my FROM statement then it doesn’t work. I tried:
FROM
'LogName20220801'
'LogName20220802'
However, the estimated data that will be processed doesn’t go up when I add the second log so it appears to only be querying the first log.
Any ideas?