2025-03-04 21:59:31 +08:00
|
|
|
% This is generated by ESQL's AbstractFunctionTestCase. Do no edit it. See ../README.md for how to regenerate it.
|
|
|
|
|
|
|
|
**Examples**
|
|
|
|
|
|
|
|
```esql
|
|
|
|
ROW current_date = NOW()
|
|
|
|
```
|
|
|
|
|
|
|
|
| y:keyword |
|
|
|
|
| --- |
|
|
|
|
| 20 |
|
|
|
|
|
|
|
|
To retrieve logs from the last hour:
|
|
|
|
|
|
|
|
```esql
|
|
|
|
FROM sample_data
|
|
|
|
| WHERE @timestamp > NOW() - 1 hour
|
|
|
|
```
|
|
|
|
|
|
|
|
| @timestamp:date | client_ip:ip | event_duration:long | message:keyword |
|
|
|
|
| --- | --- | --- | --- |
|
2025-03-13 21:16:46 +08:00
|
|
|
|
|
|
|
|