@rki
Your NiFi Expression Language (EL) statement shared expects that the inbound FlowFile already has FlowFile attribute named "end_time" with some value assigned to it.
What does that value look like? How was it created?
${end_time:lt(${now():toNumber():minus(86400000)})}
Let's break down the embedded NiFi EL statement first:
${now():toNumber():minus(86400000)}
The now() function returns the current timestamp.
The toNumber() function converts that timestamp in to milliseconds since midnight GMT Jan 1, 1970.
The minus() function subtracts the number passed to the function (86400000) from the above calculated milliseconds.
Assuming that the "end_time" attribute returns some number that represents the number of milliseconds since midnight GMT Jan 1, 1970 also and that number is less than the value calculated by the embedded NiFi EL, the NiFi EL will return "true". Essential all files were the end_time is older then 24 hours from the current timestamp.
The FlowFile would then get routed to the relationship named by your RouteOnAttribute custom property.
If false is returned and no other custom properties match, the FlowFile would be routed to unmatched.
If you are really trying to only route FlowFiles were the "end_time" milliseconds falls within the last 24 hours only, then you would want to use the ge() function instead of the lt() function.
Hope this helps,
Matt