Extract time hour with runtime field

Elastic Stack Kibana
1

Hello everyone,

I wanna extract the time hour from the @timestamp field in winlogbeat using runtime field. is there any way to do that. thank you in advance for your help.

2

Hello,
Using Datetime in Painless is a document for you.

Try: doc['@timestamp'].value.getHour()

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.