Hi , I have requirement where I have series of events that has a unique trace id. I want to find and take the timestamp from the first and last event of this id and find the difference. Since I dont have any start and end tag to track for those events, i'm not able to use elpased filter. Is there …

Find time difference between series of events with uniqueid

Badger December 7, 2020, 9:16pm 2

You may be able to use an aggregate filter. See example 3 in the documentation.

An example of calculating time difference is here.

Topic		Replies	Views
Calculate time difference between 2 events with unique id Logstash	2	375	January 13, 2023
Calculate time between different events with same ID Logstash	1	299	May 31, 2020
Combining two events in one to calculate time difference Logstash	3	2119	January 13, 2022
Calculate time difference between two logs with uniqueid Logstash	5	612	November 6, 2018
Elapsed time between consecutive logs Logstash	5	916	September 14, 2017