"Relative" time periods should support end times other than "now"

[webmstr]

I have some logs that are delayed for, say, 15 minutes. I want to make a dashboard that doesn't have a 15-minute gap between the most recent log entry and "now".

This seems like a job for the "relative" time selection option, but the end time is always "now".

If the same relative controls were enabled for the end time as are available for the start time, I think I would be able to make my dashboard.

[kkirsche]

To say how I had understood it, it's essentially an offset for when "now" is. In the example, this would be a 15-minute offset on when "now" is. Let me know if you are interested in this as I could probably add this without a ton of hassle.

Thanks!

[rashidkpc]

Agreed, this would be nice to have

[marminthibaut]

I can work on it @rashidkpc

[marminthibaut]

Is it ok for you?

[marminthibaut]

I think that another enhancement could be to update the time range span on top right. Currently it display relative times as it : ~ 30 minutes ago to ~ 15 minutes ago. Is it ok for you?

The problem for me occurred when end time is set to zero. It displays : ~ 30 minutes ago to ~ a few seconds ago, it could displays Last 30 minutes. This problem occurred because the new timepicker set end time to now-0m instead of now.

Should I add this case in the code?

[mut3]

+1 for this feature, still not implemented as of 4.3

[dtrv]

+1

We also make predictions. So end time set to "minutes|hours|days ahead" would be nice!

[omersi]

Kibana 4.5
Relative time TO: set only to now.

[Jasper1988]

I'm also waiting for this option. Would be very handy to compare something with now.

Like 7 days tot 6 days ago with something in an other visualize with 1 day ago till now.

[jlruizmlg]

+1

[lindell]

+1

[tbragin]

Fromhttps://github.com//issues/3419

via @botcher:

For systems that load data in batches (let's say, every 5 minutes), it's useful to have the concept/selector for 'now' to be now-Xminutes. This way, there won't be a drop to 0 of all charts and graphs that are up to current time. I'm not sure at what level this should be configured... Index level?

via @rashidkpc:

You would definitely want this on the index level. This would require the date math parser to have knowledge of the index pattern which it doesn't currently. What happens if 2 indices on the same dashboard have different offsets? What do you put on the right edge of the chart? Is it the actual "now"? Each individual index's offset "now"? The latter would mean you've have 2 bars in the same place that actually reference different times. I can see the use here. There's a lot of edge cases that would need to be explored to make this feasible.