Kibana, Is there a way to create session duration

[levi_munthe (Levi Irwansyah Munthe)]

Hai guys, i am new in ELK and have an issue to create a session duration between 2 field. Here is the data below.

the yellow mark is the data that i want to calculate the time. my logic is to grouping the data with session and calculate the time by (recent time - oldest time) or (top 1 CreateAt_descending - top 1 CreateAt_ascending) to calculate the session duration. is there any way to get this result.

Thanks.

[rashmi (kulkarni)]

You can create a custom field for calculating the time difference using the painless script. There is an example available at https://www.elastic.co/blog/using-painless-kibana-scripted-fields Hope it helps

Thanks
Rashmi

[levi_munthe (Levi Irwansyah Munthe)]

Thanks for answering. i will try to understand this language haha.
Because am not so familiar with this language, it's so different from SQL.

[rashmi (kulkarni)]

Yes, There is a learning curve. Here is a brief walkthrough which might help: https://www.elastic.co/guide/en/elasticsearch/painless/current/painless-walkthrough.html