I have several logs with a timestamp field.
I want to be able to group them by periods. That is, if the timestamp of a log is 30 minutes after the timestamp of the previous log, then it's in a different period.
For these logs, I want the groups (1 and 2), (3 and 4) and (5).
The condition I want to check is something like
timestamp: [previouslogtimestamp TO previouslogtimestamp+30m].
Since there is the variable "now" to use for the actual timestamp, I wonder if there's anything similar for the previous logs.