awk pattern:                                                     Mar9 15:00 to Mar12 11:00 (68h)  Edit   Menu
 60▀                               ▌
                                   ▌
                                   ▌
                                   ▌                                                                    ▗
    ▄▄▄▄▟▟▄▄▄▙▙█▙▙▙▟▄▄▄▄▄▄▄▄▄▟▄█▄▙▄▙▄▟▙▟▟▄▄▟▄▄▟▟▄▟▙▄▙▄▄▄▄▙▄▄▄▄▄▟▄▙▟▙▙▄▄▄▄▙▄▄▄▄▄▄▄▟▄▄▄▟▄▄▙▙▙▄▙▄▄▄▄▄▄█▄▄▄▄▟▄
                 ▝ Mar10           ▝ 12:00           ▝ Mar11           ▝ 12:00           ▝ Mar12         ^
time (UTC)         lstream     message                                   hostname pid  program
Mar12 10:03:46.000 testhost-01 <info> Database query failed              myhost   2812 syslog
Mar12 10:10:05.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:10:05.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:10:05.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:10:05.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:10:10.000 testhost-01 <notice> Database query failed            myhost   3500 authpriv
Mar12 10:10:12.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:10:15.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:10:15.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:10:15.000 testhost-01 <notice> System clock synchronized        myhost   3500 authpriv
Mar12 10:14:06.000 testhost-01 <warning> User session ended              myhost   173  mail
Mar12 10:16:00.000 testhost-01 <emerg> User session started              myhost   8866 ftp
Mar12 10:16:59.000 testhost-01 <notice> Timeout occurred                 myhost   3281 cron
Mar12 10:19:44.000 testhost-01 <alert> User session timed out            myhost   3462 user
Mar12 10:27:16.000 testhost-01 <alert> New update available              myhost   8396 mail
Mar12 10:32:05.000 testhost-01 <emerg> System clock synchronized         myhost   6387 syslog
Mar12 10:38:23.000 testhost-01 <debug> User login successful             myhost   1783 auth
Mar12 10:45:36.000 testhost-01 <err> Service request queued              myhost   6125 lpr
Mar12 10:53:36.000 testhost-01 <warning> Configuration reload successful myhost   4422 ftp
Mar12 10:56:46.000 testhost-01 <alert> Memory leak detected              myhost   3690 cron
idle 🖳 01 🖳 00 🖳 00 | testhost-01                                                           1000 / 1000 / 1053
Setting 'numlines' to 'foobar': strconv.Atoi: parsing "foobar": invalid syntax
