Get time difference of two terms in date

Elastic Stack Logstash
1

Hi,

I have searched the query in previous asked question.
We are having two field RequestInTime and ResponeOuTime which is in DATA format rather than Date format because of some time RequestInTime is 0.

image
image.png1225×240 40.4 KB
file:///home/vinay/Pictures/Screenshot%20from%202017-08-23%2018-06-45.png

I want to get difference of both highlighted RequestInTime and ResponeOuTime field which have CorrelationID are (Correlation_Session_0 and Correlation_Session_200) and X-Correlation-Id is same.

Is it possible to get difference by painless script or filter or any other condition?

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.