I am collecting log data and putting it into elastic search. Each document has 4 columns containing timestamp, key(not unique), Interface and Message. I need to calculate the time difference between two rows with same value in key column for a particular interface column value containing specific me…

This seems to be the only solution. [image] Compare fields in two documents? Kibana Scripted fields can only calculate data WITHIN one document. You CANNOT calculate data across multiple documents. To achieve writing that diff, you will need to measure it before indexing …

Discuss the Elastic Stack

Calculation time difference between two document

Elastic Stack Kibana

Pradyumna_Jha (Pradyumna Jha) April 1, 2019, 11:01pm 5

This seems to be the only solution.

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.