SelectWithUnionQuery (children 2)
 ExpressionList (children 1)
  SelectQuery (children 2)
   ExpressionList (children 5)
    Function toDateTime (alias dt_ref) (children 1)
     ExpressionList (children 1)
      Literal \'2023-06-30 23:59:30\'
    Function now (alias dt_now) (children 1)
     ExpressionList
    Function minus (alias dt_before) (children 1)
     ExpressionList (children 2)
      Identifier dt_now
      Function toIntervalDay (children 1)
       ExpressionList (children 1)
        Literal UInt64_1
    Function dateDiff (alias time_shift) (children 1)
     ExpressionList (children 3)
      Literal \'second\'
      Identifier dt_ref
      Identifier dt_now
    Function formatDateTime (alias syslog_before) (children 1)
     ExpressionList (children 2)
      Identifier dt_before
      Literal \'%b %e %T\'
   ExpressionList (children 13)
    Function formatDateTime (alias syslog_arg) (children 1)
     ExpressionList (children 2)
      Function minus (children 1)
       ExpressionList (children 2)
        Identifier dt_before
        Identifier time_shift
      Literal \'%b %e %T\'
    Function minus (alias res) (children 1)
     ExpressionList (children 2)
      Function parseDateTimeBestEffort (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res_null) (children 1)
     ExpressionList (children 2)
      Function parseDateTimeBestEffortOrNull (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res_zero) (children 1)
     ExpressionList (children 2)
      Function parseDateTimeBestEffortOrZero (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res_us) (children 1)
     ExpressionList (children 2)
      Function parseDateTimeBestEffortUS (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res_us_null) (children 1)
     ExpressionList (children 2)
      Function parseDateTimeBestEffortUSOrNull (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res_us_zero) (children 1)
     ExpressionList (children 2)
      Function parseDateTimeBestEffortUSOrZero (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res64) (children 1)
     ExpressionList (children 2)
      Function parseDateTime64BestEffort (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res64_null) (children 1)
     ExpressionList (children 2)
      Function parseDateTime64BestEffortOrNull (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res64_zero) (children 1)
     ExpressionList (children 2)
      Function parseDateTime64BestEffortOrZero (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res64_us) (children 1)
     ExpressionList (children 2)
      Function parseDateTime64BestEffortUS (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res64_us_null) (children 1)
     ExpressionList (children 2)
      Function parseDateTime64BestEffortUSOrNull (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
    Function minus (alias res64_us_zero) (children 1)
     ExpressionList (children 2)
      Function parseDateTime64BestEffortUSOrZero (children 1)
       ExpressionList (children 1)
        Identifier syslog_before
      Identifier time_shift
 Identifier Vertical
