# Elapsed filter error

**URL:** <https://discuss.elastic.co/t/elapsed-filter-error/61140>\
**Category:** Logstash\
**Created:** [September 21, 2016, 2:00pm UTC](https://discuss.elastic.co/t/elapsed-filter-error/61140 "2016-09-21T14:00:15Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![il.bert](https://avatars.discourse-cdn.com/v4/letter/i/ac91a4/32.png) [@il.bert](https://discuss.elastic.co/u/il.bert)\
**Post date:** [September 21, 2016, 2:00pm UTC](https://discuss.elastic.co/t/elapsed-filter-error/61140/1 "2016-09-21T14:00:16Z")

</div>

Hi everybody, I'm trying to use the elapsed filter but I think it has a bug

this is my -cleaned- result

```
"@timestamp": "2016-09-20T01:52:21.000Z",
"tags": [
  "elapsed",
  "elapsed_match"
],
"elapsed_time": 128143.655,
"elapsed_timestamp_start": "2016-09-20T01:51:18.000Z"

```

as you can see between the two timestamps only 66s passed  
instead the result is 128143 which are actually the seconds between the start\_event timestamp and the submission of the end\_event

both the events were submitted to logstash at 21 Sep 2016 13:27:01 GMT in a single block

It seems to me that it is using the timestamp of the start\_event (correct) but the submission time of the end\_event (wrong) I expect it to use the timestamp in both of them. Why is it having such a strange behavior?

---

<div class="post-metadata">

**Author:** ![il.bert](https://avatars.discourse-cdn.com/v4/letter/i/ac91a4/32.png) [@il.bert](https://discuss.elastic.co/u/il.bert)\
**Post date:** [September 21, 2016, 2:22pm UTC](https://discuss.elastic.co/t/elapsed-filter-error/61140/2 "2016-09-21T14:22:25Z")

</div>

my fault

i was actually applying elapsed filter after changing the timestamp of the event with the one I parse

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:37am UTC](https://discuss.elastic.co/t/elapsed-filter-error/61140/3 "2017-07-06T04:37:34Z")

</div>


