The reason this is not available any more is because the default scripting engine used in Kibana was switched from Groovy to Lucene expressions for security reasons, and Lucene expressions do not support date math. We are working on alternatives, but no ETA yet on when they would be available.
In the meanwhile, you have the following options:
- Use Logstash to parse the date into other structured fields
- Use static Groovy scripts on the ES side and call them from Kibana: Calling groovy script from Kibana
- Turn on dynamic scripting in ES (not secure!) and specify Groovy as the scripting language in Kibana