Kibana, Is there a way to create session duration

Hai guys, i am new in ELK and have an issue to create a session duration between 2 field. Here is the data below.

the yellow mark is the data that i want to calculate the time. my logic is to grouping the data with session and calculate the time by (recent time - oldest time) or (top 1 CreateAt_descending - top 1 CreateAt_ascending) to calculate the session duration. is there any way to get this result.

Thanks.

You can create a custom field for calculating the time difference using the painless script. There is an example available at https://www.elastic.co/blog/using-painless-kibana-scripted-fields Hope it helps

Thanks
Rashmi

Thanks for answering. i will try to understand this language haha.
Because am not so familiar with this language, it's so different from SQL.

Yes, There is a learning curve. Here is a brief walkthrough which might help: https://www.elastic.co/guide/en/elasticsearch/painless/current/painless-walkthrough.html

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.