Data Dif @timestamp

Hello

I have an index containing an id and @timestamp.

image

I need to make the difference between the first @timestamp and the last @timestamp.

Is it possible to perform this calculation in Script Fields?

It can be done using the Math aggregation in TSVB the easiest. Create a metric for Max, one for Min, group them by that ID and then do a Math where you do the difference.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.