Add timestamp range example to kql docs (#87138)

A few folks have asked me if it is possible to do timestamp ranges by using "now" in kql. This was missing from an example so I have added it to the docs.

(cherry picked from commit 48df620b1d30a9dcd08423204b66b453e50e587b)
This commit is contained in:
Alex Close 2021-01-05 09:26:28 +00:00 committed by GitHub
parent 0af81310b6
commit f22e06e618
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -111,11 +111,11 @@ tags:(success and info and security)
[discrete]
=== Range queries
KQL supports `>`, `>=`, `<`, and `<=`. For example:
KQL supports `>`, `>=`, `<`, and `<=` on numeric and date types. For example:
[source,yaml]
-------------------
account_number >= 100 and items_sold <= 200
account_number >= 100 and items_sold <= 200 and @timestamp >= now-5m
-------------------
[discrete]