Get datepart from @timestamp in 7.1

Elastic Stack Kibana
#1

I am trying to get the date part from the @timestamp field in 7.1. Looks like all the date functions were introduced in 7.5.
Is there a way I can get the date part using SQL in Kibana

Trying the below query
SELECT date_part('day',"@timestamp") as date FROM <index_name>

#2

You must be using canvas? Do you need all the day parts to be unique? You could post-process the dates by formatting them, something like this

|essql "SELECT \"@timestamp\" as date FROM index"
| mapColumn date fn={getCell | date format="MM/DD"}
#3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.