Fetch timestamp of a 2 particular rows based a column

Elastic Stack Beats
1

Hi Team,

I want to fetch timestamp of a 2 particular rows based a column and then want to find out duration in between both. Is there any inbuilt way to implement this or possible ways. All suggestions are welcome.

Thanks in Advance,
Ashish

2

What you are looking for sounds like processing of the log line. For this have a look at Logstash or the Ingest Pipeline. As your case sounds more complex and probably a scripts is needed, Logstash is your best bet.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.