What is the best solution for one of the basic requirements in log's analisis. "CALCULATE DURATION"
The problem is to calculate the duration between 2 events. For example:
15-04-2016T10:00:00:000+UTC 1 start data
15-04-2016T10:00:00:001+UTC 2 start data
15-04-2016T10:00:00:004+UTC 2 end data
15-04-2016T10:00:00:005+UTC 1 end data
In that case, it's necessary to add a field called "Duration" on the "end events" and assign the subtract the time.
15-04-2016T10:00:00:000+UTC 1 start data 0
15-04-2016T10:00:00:001+UTC 2 start data 0
15-04-2016T10:00:00:004+UTC 2 end data 3
15-04-2016T10:00:00:005+UTC 1 end data 5
Thank you to all.