Essql timestamp query in canvas

Elastic Stack Kibana
,
1

SELECT islandtype FROM "index1*"
where '@timestamp' > now() - INTERVAL 200 minutes
group by islandtype

this give me blank it says no document found. but I know I have document.
when I remove where clause it give me output.
what am I doing wrong?

this in canvas

2

You have to use double quotes to escape the field name: "@timestamp". Otherwise it will compare it with the literal string @timestamp

1 Like
3

that worked.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.