Hi team, I need a query that takes the @timestamp from the timepicker and then add an offset of 7 days. I don't know how to do it. I tried: (@timestamp <= "now-1d/d+7d") but it's not working as I wanted. Could someone help me, please? Thanks!

I did some tests and the behavior is a bit weird. I have the same result by doing this : @timestamp >= "now-1d/d+11h" AND @timestamp <= "now-1d/d+13h" OR this : @timestamp <= "now-1d/d+13h" I tried everything but I can't go back any further than today's date at midnight ! Here another link tha…

KQL from @timestamp until 7days offset

Elastic Stack Kibana

baddack January 19, 2022, 1:49pm 2

Hello,

According to this topic it's not possible to add an offset to timestamp
==> Kibana Query Language - @timestamp

They talked about some alternatives that may help you... sorry if not

Sincerely,

Topic		Replies	Views
Lucene syntax equivalent for "Today"? Does it exist? Kibana	7	5103	November 20, 2019
Date Maths in Kibana Query Language Kibana kql-kibana-query-language	3	1158	November 4, 2023
What's the Lucene equivalent of KQL query: now/d Kibana	4	291	November 9, 2022
Lucene Query Language using now date time Kibana	4	6581	July 27, 2021
Setting hour in KQL or Lucene Kibana	5	497	August 2, 2022

KQL from @timestamp until 7days offset

Related Topics