Hello,
Sorry, I am new to the ELK universe.
I created an observer with a filter, and I configured it to add a PDF in a notification email. My filter is set to the last 24 hours (at the current time), I would like to modify the URL generated via "Copy POST URL" to have a fromDate to Date for the last 24 hours each time the filter matches instead of the current filter time, but I can't replace that part in the code string, is it possible?
Example "resolvedDateRange%3A%28fromDate%3A%272025-03-10T14%3A04%3A16.324Z%27%2CtoDate%3A%272025-03-11T14%3A04%3A16.324Z%27%29%2C"
to something like mentioned in the documentation Automatically generate reports | Kibana Guide [8.13] | Elastic
resolvedDate(range:(%27@timestamp%27:(gte:now-24h%2Fd,lte:now%2Fd)))
Could you please help me?
Thank you in advance.