How to capture "now" and "now-15m" in mail body?

[Debashis_Adak]

Hi All,

I am trying to capture the time "now" and "now-15m" in my mail body of the kibana watcher. Can you help me with the syntax?

Thanks & Regards,
Debashis

[spinscale (Alexander Reelsen)]

Hey,

the definition of now is internal to an Elasticsearch query and not exposed. If it is ok to have a value that is nearby, you could use the execution time of the watch context by using {{ctx.execution_time}}.

hope this helps

--Alex

[Debashis_Adak]

Hi Alex,

Thanks for answering the query. Is there any way we can calculate "{{ctx.execution_time}}-15 minutes" in the mail body?

Thanks & Regards,
Debashis Adak

[spinscale (Alexander Reelsen)]

you could do a transform before the action and do sth like

def x = Instant.ofEpochMilli(ctx.execution_time.getMillis()).plusSeconds(60*15)

Note: untested, on top of my head.

--Alex