fields @timestamp, trace_id
| filter @message like /5000ms/
| sort @timestamp desc
| limit 10000
fields @timestamp, level, component, type as eventName, msg
| filter trace_id = "69690108e8f9f4b0584b6bfb15d4087d"
| filter msg not like "Annotation" AND component not like "typeorm" AND msg not like "Metadata"
| sort @timestamp asc
| limit 1000