Site Reliability Guardian: filter guardian runs bases on validation.from validation.to duration

[KevinB]

I have 2 workflows running for 1 guardian

1 wich runs daily with data over 1 day

1 wich runs weekly with data over 1 week.

Both runs are visible on the Guardian and when I query them I can see the difference in validation.from validation.to

example for the weekly one

validation.from2026-01-02T06:10:02.063Z

validation.to2026-01-09T06:10:02.100Z

But when I try to query them using 

| fieldsAdd window = attributes.to - attributes.from
| filter window == 1w

I get error : Calendar durations aren't supported here.

what would be the best way to filter my runs that have data for 1 week ? 

I'm able to filter them based on validation.workflow.id, but that is not the solution I was looking for. 

[jolinger · Accepted solution]

I’m not sure why this behaves this way, but filtering by week duration doesn’t seem to be supported. Filtering by a 7-day duration works as expected, though.

data record(validation.from=toTimestamp("2026-01-02T06:10:02.063Z"),
validation.to=toTimestamp("2026-01-09T06:10:02.100Z"))
| fieldsAdd window = validation.to - validation.from
| filter window >= 7d

[KevinB · Accepted solution]

it doesn't seem to store the data for the window field

it's working now, had to convert the format

| fieldsAdd window = (toTimestamp(validation.to) - toTimestamp(validation.from))