[DOCS] Adds date math to KQL doc (#125880)

* [DOCS] Adds date math to KQL doc

* [DOCS] Adds examples of date math expressions
This commit is contained in:
gchaps 2022-02-17 09:52:37 -08:00 committed by GitHub
parent a29c81b7db
commit d64fc1ce00
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -144,6 +144,20 @@ but in some cases you might need to search on dates. Include the date range in q
@timestamp < "2021"
-------------------
KQL supports date math expressions.
[source,yaml]
-------------------
@timestamp < now-1d
-------------------
[source,yaml]
-------------------
updated_at > 2022-02-17||+1M/d
-------------------
Check the
{ref}/common-options.html#date-math[date math documentation] for more examples.
[discrete]
=== Exist queries