Implemented David's feedback

Author: dcpena

src/content/docs/log-explorer/example-queries.mdx

@@ -22,9 +22,7 @@ SELECT
   SUM(EdgeResponseBytes) / (1024.0 * 1024.0) AS total_data_transfer_mb
 FROM
   http_requests
-WHERE
-  EdgeEndTimestamp >= '2026-02-01T00:00:00Z'
-  AND EdgeEndTimestamp <= '2026-02-08T23:59:59Z'
+WHERE {{ timeFilter }}
 ```
 
 ## Review distribution of security actions
@@ -50,13 +48,22 @@ Identify the top client IP addresses and request URIs that triggered managed, Ja
 SELECT
   ClientIP,
   ClientRequestURI,
-  SecurityAction,
+  SecurityActions,
   COUNT(*) AS Count
 FROM http_requests
-WHERE SecurityAction IN ('managed_challenge', 'jschallenge', 'challenge')
-GROUP BY ClientIP, ClientRequestURI, SecurityAction
+WHERE {{ timeFilter }}
+  AND (
+    ARRAY_CONTAINS(SecurityActions, 'challenge')
+    OR ARRAY_CONTAINS(SecurityActions, 'managedChallenge')
+    OR ARRAY_CONTAINS(SecurityActions, 'jsChallenge')
+    OR ARRAY_CONTAINS(SecurityActions, 'challengeSolved')
+  )
+GROUP BY
+  ClientIP,
+  ClientRequestURI,
+  SecurityActions
 ORDER BY Count DESC
-LIMIT 10
+LIMIT 20
 ```
 
 ## Find highest bandwidth consumers by URI
@@ -68,6 +75,7 @@ SELECT
   ClientRequestURI,
   SUM(EdgeResponseBytes) / (1024 * 1024) AS MegabytesTransferred
 FROM http_requests
+WHERE  {{ timeFilter }}
 GROUP BY ClientRequestURI
 ORDER BY MegabytesTransferred DESC
 LIMIT 10
@@ -85,10 +93,7 @@ SELECT
   MIN(ClientTCPRttMs) AS min_rtt,
   MAX(ClientTCPRttMs) AS max_rtt
 FROM http_requests
-WHERE date = '2026-03-04'
-  AND EdgeEndTimestamp >= '2026-03-04T00:00:00Z'
-  AND EdgeEndTimestamp <= '2026-03-04T23:59:59Z'
-  AND ClientTCPRttMs > 0
+WHERE {{ timeFilter }}
 GROUP BY ClientCountry
 ORDER BY avg_rtt DESC
 LIMIT 20
@@ -105,9 +110,7 @@ SELECT
   SUM(EdgeResponseBytes) AS total_bytes,
   AVG(EdgeTimeToFirstByteMs) AS avg_ttfb
 FROM http_requests
-WHERE date = '2026-03-04'
-  AND EdgeEndTimestamp >= '2026-03-04T00:00:00Z'
-  AND EdgeEndTimestamp <= '2026-03-04T23:59:59Z'
+WHERE {{ timeFilter }}
 GROUP BY CacheCacheStatus
 ORDER BY requests DESC
 ```
@@ -123,10 +126,7 @@ SELECT
   COUNT(*) AS requests,
   SUM(CASE WHEN EdgeResponseStatus >= 500 THEN 1 ELSE 0 END) AS errors
 FROM http_requests
-WHERE date = '2026-03-04'
-  AND EdgeEndTimestamp >= '2026-03-04T00:00:00Z'
-  AND EdgeEndTimestamp <= '2026-03-04T23:59:59Z'
-GROUP BY ClientRequestPath
+WHERE {{ timeFilter }}
 ORDER BY avg_ttfb DESC
 LIMIT 10
 ```