Date range search from the 25th of the month to now

Elastic Stack Elasticsearch
1

Using a range query, it's easy to search from the 1st of the month until now. However, I need to create an alert that aggregates date from the 25th of the month to now. For example, if today is the Jan 24, then I want data from Dec 25th to Jan24. But if today is Jan 26th, then I want data from Jan 25 to Jan 26th.

I can't do (((now/M)-1M)+25d) as this won't work between the 26th and the 1st of the next month.

I can't think if a way to do this using date math - is there a way? If not what other alternatives are there? Could I figure out the last 25th in a scripted field and that use that in the range query somehow?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.