So this link:
nor this link:
document how to use KQL to search fields with dates. We have a creation_date field (not the @timestamp) and would like to search on it. When I tried to search:
creation_date > 2019-11-04T09:00:00
it told me that I was using lucene syntax. I also tried:
creation_date > -2d
But got an error.
Is there a page/post that has already covered this?