Loading

ES|QL NOW function

Returns current date and time.

Embedded

Returns current date and time.

result
date
ROW current_date = NOW()
		
y:keyword
20

To retrieve logs from the last hour:

FROM sample_data
| WHERE @timestamp > NOW() - 1 hour