Hi,
I am trying to use canvas variable's within ESQL query and cannot work out the syntax, I have it working within Markdown but cannot work it out within my query, I've searched the support and discuss and tried a number of examples but cannot get it to work.
WHERE "@timestamp" > TODAY() - INTERVAL 30 DAY AND organization.name={var "Org"}