Hi team, I need a query that takes the @timestamp from the timepicker and then add an offset of 7 days. I don't know how to do it. I tried: (@timestamp <= "now-1d/d+7d") but it's not working as I wanted. Could someone help me, please? Thanks!

I did some tests and the behavior is a bit weird. I have the same result by doing this : @timestamp >= "now-1d/d+11h" AND @timestamp <= "now-1d/d+13h" OR this : @timestamp <= "now-1d/d+13h" I tried everything but I can't go back any further than today's date at midnight ! Here another link tha…

KQL from @timestamp until 7days offset

Elastic Stack Kibana

baddack January 19, 2022, 1:49pm 2

Hello,

According to this topic it's not possible to add an offset to timestamp
==> Kibana Query Language - @timestamp

They talked about some alternatives that may help you... sorry if not

Sincerely,

Topic		Replies	Views
Kibana Query Language - @timestamp Kibana	6	3644	May 21, 2020
Lucene syntax equivalent for "Today"? Does it exist? Kibana	7	5141	November 20, 2019
Date Maths in Kibana Query Language Kibana kql-kibana-query-language	3	1201	November 4, 2023
What's the Lucene equivalent of KQL query: now/d Kibana	4	295	November 9, 2022
Date math in Kibana 5 Kibana	9	3581	December 22, 2016

KQL from @timestamp until 7days offset

Related topics