Reference time picker in timelion query

Elastic Stack Kibana
1

I have a query that shows the cumulative number of items created in a given period of time. It uses the startTime and endTime as the timefields. The problem is, I want to filter out all of the endTimes which do not have a startTime in the time picker window. Is there any way to use the time picker's start time to use in my query?

This is my current query:

.cusum(.subtract(.es(index="csaf2",timefield="startTime"), .es(index="csaf2",timefield="endTime")))

I want it to look something like:

.cusum(.subtract(.es(index="csaf2",timefield="startTime"), .es(index="csaf2",timefield="endTime",q="startTime:<TIMEPICKER.STARTTIME")))

2

maybe it can help you

3

That's not really what I'm looking for. I'm already using the time picker to filter the search, I just need to reference it to see if a document should be further filtered out. It doesn't look like it can be done using kibana=true unless I'm missing something.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.