ESQL for Current Month

I need to get data on the Canvas for current month only.
Can someone help with the SQL query on Canvas similar to the KQL below.

@timestamp > "now/M" and @timestamp <= "now"

This should work:

WHERE timestamp > DATE_TRUNC('month', NOW())  and timestamp <= NOW()
1 Like

Thanks a ton :wink: :smiley:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.