Time filter for the current day

[ahodasevich]

I'm writing a custom rule, inheriting from MetricAggregation.
I need to receive aggregated indicators for the current day every 10 minutes.
I'm using a filter, but it's being ignored. The request to elastic uses a range of 10 minutes.

filter:
-range:
   "@timestamp":
      gte: "now/d"
      lte: "now/d+1d"
run_every:
minutes: 10

Is it possible to obtain data for the current day?

[jertel]

Not really. ElastAlert 2's core is responsible for managing time. It records where it left off, and runs the next rule cycle based on that timing data. You can tweak the size of the search window using buffers and offsets but I don't believe there's anything that currently provides clean day boundaries.