From 6238a5b3edf048dfa5ba70e0948bb69262ffb4ff Mon Sep 17 00:00:00 2001
From: reyesj2 <94730068+reyesj2@users.noreply.github.com>
Date: Mon, 2 Jun 2025 16:31:26 -0500
Subject: [PATCH] tighten up search timeframe

---
 salt/elasticsearch/tools/sbin/so-elasticsearch-index-growth | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/salt/elasticsearch/tools/sbin/so-elasticsearch-index-growth b/salt/elasticsearch/tools/sbin/so-elasticsearch-index-growth
index 801f64342..7e31a5eed 100644
--- a/salt/elasticsearch/tools/sbin/so-elasticsearch-index-growth
+++ b/salt/elasticsearch/tools/sbin/so-elasticsearch-index-growth
@@ -74,7 +74,7 @@ for index in $indexes; do
   size_24h_ago=${size_24h_ago:-$current_size}
 
   size_7d_query="from(bucket: \"telegraf/so_long_term\")
-    |> range(start: -8d, stop: -6d)
+    |> range(start: -7d8h, stop: -7d)
     |> filter(fn: (r) => r._measurement == \"elasticsearch_index_size\" and r._field == \"$index\")
     |> last()
     |> keep(columns: [\"_value\"])"
@@ -83,7 +83,7 @@ for index in $indexes; do
   size_7d_ago=${size_7d_ago:-$current_size}
 
   size_30d_query="from(bucket: \"telegraf/so_long_term\")
-    |> range(start: -31d, stop: -29d)
+    |> range(start: -30d8h, stop: -30d)
     |> filter(fn: (r) => r._measurement == \"elasticsearch_index_size\" and r._field == \"$index\")
     |> last()
     |> keep(columns: [\"_value\"])"