I am trying to use canvas variable's within ESQL query and cannot work out the syntax, I have it working within Markdown but cannot work it out within my query, I've searched the support and discuss and tried a number of examples but cannot get it to work.
WHERE "@timestamp" > TODAY() - INTERVAL 30 DAY AND organization.name={var "Org"}
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.