I would like to create a scripted field that takes my existing timestamp field and subtracts 1 hour.
What I have is:
Script: doc['@timestamp'].value - 3600000
When this is in place I receive a "Courier Fetch... shards failed" error.
Thanks for your help,