Assuming that I understood correctly, and in this case, your query would be similar to this one:
Where "now-6h/d" gets the current time minus six hours, rounded to the start of the day +6h.
© 2020. All Rights Reserved - Elasticsearch
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.