SELECT
  count(*)
FROM (
  SELECT
    createTime,
    startTime,
    endTime
  FROM (
    SELECT
      protoPayload.serviceData.jobCompletedEvent.job.jobStatistics.createTime AS createTime,
      protoPayload.serviceData.jobCompletedEvent.job.jobStatistics.startTime AS startTime,
      protoPayload.serviceData.jobCompletedEvent.job.jobStatistics.endTime AS endTime
    FROM
      `catalog.cloudaudit_googleapis_com_data_access_201701*`))
WHERE
  createTime<TIMESTAMP("2017-01-19 13:16:48","America/Los_Angeles")
  AND endTime>TIMESTAMP("2017-01-19 13:16:48","America/Los_Angeles")