Hi , I have requirement where I have series of events that has a unique trace id. I want to find and take the timestamp from the first and last event of this id and find the difference. Since I dont have any start and end tag to track for those events, i'm not able to use elpased filter. Is there …

Find time difference between series of events with uniqueid

Badger December 7, 2020, 9:16pm 2

You may be able to use an aggregate filter. See example 3 in the documentation.

An example of calculating time difference is here.

Topic		Replies	Views
Calculate time difference between 2 events with unique id Logstash	2	374	January 13, 2023
Calculate time between different events with same ID Logstash	1	298	May 31, 2020
Combining two events in one to calculate time difference Logstash	3	2107	January 13, 2022
How to use aggregate function in logstash to calculate difference between 'elapsed' time fields? Logstash	5	950	May 26, 2020
Logstash Aggregate with multiple end tags Logstash	6	594	June 14, 2020