$ curl localhost:9200/hoge/_search -d' { "aggs": { "range_10minutes": { "date_range": { "field": "@timestamp", "format": "HH-mm-ssZ", "ranges": [ { "to": "now/m", "from": "now-10m/m" } ] } } } }' | jq .aggregations { "range_10minutes": { "buckets": [ { "key": "15-17+0000-15-27+0000", "from": 1488640620000, "from_as_string": "15-17+0000", "to": 1488641220000, "to_as_string": "15-27+0000", "doc_coun