Calculate session time

Hey all,

I'm new to ELK but i have a working stack running with a decent filtered log.
We are logging our application and something we want to see is the time a user is using a session.
We are sending the session id and the timestamp, is it possible to calculate this in kibana?

Hi Wesley,

This is actually something that would be better accomplished at the Elasticsearch level. I'd suggest getting started by first reading this:

https://www.elastic.co/elasticon/2015/sf/building-entity-centric-indexes

Thanks, i'll look into it

Anyone got examples on how to use this?