I am using the latest version of logstash(7.6.2). I am trying to calculate the total time spent in system excluding time spent between Out2 and In2 i.e. [(Out3-In1) - (Out2-In2)] for a given ID. Find below my sample data with columns Timestamp, Event, and ID Sample Data 18/May/2015:02:05:10 +000…

I have added piepline.workers:1 in the logstash.yml and it works now.

How to use aggregate function in logstash to calculate difference between 'elapsed' time fields?

system (system) Closed May 26, 2020, 7:16pm 6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Combining two events in one to calculate time difference Logstash	3	2198	January 13, 2022
Aggregate? Logstash	11	3848	July 6, 2017
Elapsed time between starting log line ending log in a log file Logstash	3	512	September 20, 2019
Calculate time difference between 2 lines in log file Logstash	6	3627	April 23, 2019
Calculate time difference between two log lines - Logstash Logstash	5	975	January 19, 2022