Data extraction, Watcher - CSV export with relative time period


I am attempting to extract a CSV of data from ES/Kibana every hour.

I've configured a watcher task which runs hourly, and emails a CSV file (based on the discover POST URL form here Automatically generate reports | Kibana Guide [8.1] | Elastic)

However, the above doesn't provide me with a relative timestamp, i.e the data is always for the period when I created the saved Discover search.

Is it possible to use watcher with a relative time period? Or is there a different mechanism i should use to extract the data?

Additionally, is there a way to use watcher with aggregated data from a visualization? (as opposed to data from discover)

Many thanks in advance for the assistance.


This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.