Hello, I push some events to elasticsearch with the following structure: { "name": "status", "value": "active", "timestamp": "2018-01-01T00:00:00.000Z" } And when I receive a new event with the same name, like { "name": "status", "value": "stopped", "timestamp": "2018-01-…

[image] moimart1: And when I receive a new event with the same name , like If you have lots of unique names to track see discussion on Distinct count with filter

Thanks If I understand correctly, you suggest to do another index with my events with start stop from my events with only start. How I can update automatically my new index ? I need to do an external script or I can have a "built-in" solution ?

Add stop timestamp base on previous doc (event)

Elastic Stack Elasticsearch

Mark_Harwood (Mark Harwood) November 12, 2018, 4:26pm 2

If you have lots of unique names to track see discussion on Distinct count with filter

Topic		Replies	Views
How to calculate elapsed time between two events in different documents Elasticsearch	1	436	January 18, 2022
How to calculate between document Elasticsearch	3	590	July 6, 2017
Updating document with scripted_metric aggregation result Elasticsearch	2	411	March 27, 2017
Elasticsearch - Timestamp based document Upsert Elasticsearch	1	460	March 27, 2021
Start and stop events in logfiles Elasticsearch	3	889	July 5, 2017

Add stop timestamp base on previous doc (event)

Related topics