Finding difference between 2 rows in Kibana Visualtisation

Elastic Stack Kibana
1

I was trying to find the difference between 2 timestamps in Kibana table see in the

13%20PM
Screen Shot 2019-03-04 at 2.17.13 PM.png2018×780 75.5 KB

I want to create a field calculating the time difference between 1st timestamp ie February 20th 2019, 14:06:11.868 and 2nd ie February 20th 2019, 14:06:14.856 and get a field lets say "time_diff" in the table.
How can this be achieved in ELK?

2

I want to create a field calculating the time difference between 1st timestamp ie February 20th 2019, 14:06:11.868 and 2nd ie February 20th 2019, 14:06:14.856 and get a field lets say "time_diff" in the table.

That is not possible in Kibana. I would recommend adding time_diff to the document at ingest (before insert, look up the previous document that relates to this one, calculate the diff, and add a new field containing that value). That way, the field will be available for use in Kibana.