Adding scripted entry

Elastic Stack Kibana
1

Hi All ,

I have a log for batch run for porfolios which is having entry for start time and end time.
When it is getting indexed into elasticsearch ,it creates individual date type entry for both start & end time.

Problem Statement- The line chart for timeline view showing complete life of portfolio is not getting plotted as X-axis (dateHistogram) pick either start or end time once.

Is it possible to create timestamp with all the date type entries.
Please suggest.

PFB data sequence in log-

Process ID,Batch Name,Batch plugin,Job Sequence,6/7/2016 9:20:22(Start Time),6/7/2016 12:08:14(End Time), server name,Portfolio,Deal Count,Query,168(Total Elapsed Time), Process Count, Error

Regards,
Prateek

2

So, if I understand correctly, you'd like to be able to plot on a chart the duration (end time minus start time). Is that correct?

Unfortunately, that's not really possible without indexing the duration into Elasticsearch.

I would recommend taking a look at this talk about entity-centric indexing to understand more.