There's no actual formula that we can use to get the timestamp of a breached ticket. However we can use the attribute SLA Update timestamp to get the data you want. Please refer to the screenshot below.
I have created a test query showing the timestamp of all breached SLA metric for my tickets. This should give you an idea on how to create a similar report on your own.
If you have followup questions, feel free to respond to this email and I'll be glad to help.
Yes this is currently a limitation of Explore as the actual timestamp of the breach is not something that is stored in Explore. I would recommend writing feedback on our product forums here for our product teams.
There's no actual formula that we can use to get the timestamp of a breached ticket. However we can use the attribute SLA Update timestamp to get the data you want. Please refer to the screenshot below.
I have created a test query showing the timestamp of all breached SLA metric for my tickets. This should give you an idea on how to create a similar report on your own.
If you have followup questions, feel free to respond to this email and I'll be glad to help.
Cheers,
Dane
Zendesk | Customer Advocate