How to calculate difference between two dates and add to index


I have a log file and each entry contains multiple dates (when a ticket was opened, assigned, closed). Can I calculate the time passed with logstash and then add this value to each entry?

(Magnus B├Ąck) #2

Yes, but I suspect you'll have to write some custom Ruby code in a ruby filter.

(Wajahat Javaid) #3

Hi, I have a similar use case, I just wanted to know if someone was able to solve this problem.

(system) #4