Kibana 5.1 possible to calculate time difference and place it in a field in kibana at runtime?

Elastic Stack Kibana
1

Hi there,

I know I can do many cool stuff in logstash, for example calculating time differences and store it in a field.
Now my question, is it possible to do such stuff in kibana in realtime too?

Say, I have following timestamps in my event

  • @timestamp
  • timestampStart
  • timestampEnd

Is it possible to calculate a "virtual" field "timeDiff" in kibana by calculating timestampEnd-timestampStart?
I don't need to search by these fields, but aggregating on them would help.

Other familiar topic is, to convert for example a field which contains a value in seconds to hours to have a better overview in dashboards.

Is that possible? How?

Thanks, Andreas

2

hi @asp

You would use a scripted field for that.

My response here - to a similar question - has some links to resources to help you get started Plot latency measure based on two time fields in an index

3

thanks for the fast response. I will take a deeper look

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.