I am trying to use scripted fields to subtrack two datetime fields to determine how long it took for a file to processed.
doc.['time_var1'].value - doc.['time_var2'].value
doc being the index name.
I get this error:
Visualize: Request to Elasticsearch failed: {"error":"SearchPhaseExecutionException[Failed to execute phase [query], all shards failed; shardFailures {[rtl_z8lBRrGHGQPtgehi2w]
my time_var1 is something like this: 2016-01-13 16:34:59 the same format for the time_var2.
Is there something am I missing?