It seems to me that because query log records end time, it doesn't log queries until they are finished. So, if server runs into OOM and crashes due to some expensive queries, the offending queries will never be logged in query log.
{
"params": {
"end": "2022-01-19T03:37:34.316Z",
"query": "... ...",
"start": "2022-01-19T03:37:34.316Z",
"step": 0
},
"ruleGroup": {
"file": "... ...",
"name": "... ..."
},
"stats": {
"timings": {
"evalTotalTime": 0.0027992,
"execQueueTime": 6.581e-06,
"execTotalTime": 0.002811287,
"innerEvalTime": 0.001367707,
"queryPreparationTime": 0.001420335,
"resultSortTime": 0
}
},
"ts": "2022-01-19T03:37:34.401Z"
}