Is it possible to perform a search over a specified 30 minute timeframe over a number of days?
For example, I would like to query the CPU metric from metricbeat between 09:00 and 09:30 for the last 7 days and export this to CSV.
Would I need to do this for each day separately or is this possible via a more complex query?