Add timestamp range example to kql docs (#87138) (#87323)

A few folks have asked me if it is possible to do timestamp ranges by using "now" in kql. This was missing from an example so I have added it to the docs.

(cherry picked from commit 48df620b1d30a9dcd08423204b66b453e50e587b)

Co-authored-by: Alex Close <alex.close@elastic.co>
This commit is contained in:
gchaps 2021-01-05 08:12:06 -08:00 committed by GitHub
parent c7dac6502a
commit 767cb55bfa
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -111,11 +111,11 @@ tags:(success and info and security)
[discrete]
=== Range queries
KQL supports `>`, `>=`, `<`, and `<=`. For example:
KQL supports `>`, `>=`, `<`, and `<=` on numeric and date types. For example:
[source,yaml]
-------------------
account_number >= 100 and items_sold <= 200
account_number >= 100 and items_sold <= 200 and @timestamp >= now-5m
-------------------
[discrete]