I have tried to use following SQL in kibana internal index:
SELECT dashboard.title FROM ".kibana*" WHERE updated_at > TODAY() - INTERVAL CAST(MONTH_OF_YEAR(TODAY()) AS interval_month) MONTHS
Unfortunately I get an error:
[essql] > Couldn't parse Elasticsearch SQL query. You may need to add double quotes to names containing special characters. Check your query and try again. Error: [parsing_exception] line 1:79: Invalid [INTERVAL MONTH] value [CAST(MONTH_OF_YEAR(TODAY()) AS interval_month)]: expected digit (at ) but found [C]
Tired as well to user CONVERT function and convert to integer, but this does not work either.
Can someone help? :_)