Kibana, Is there a way to create session duration

Hai guys, i am new in ELK and have an issue to create a session duration between 2 field. Here is the data below.

the yellow mark is the data that i want to calculate the time. my logic is to grouping the data with session and calculate the time by (recent time - oldest time) or (top 1 CreateAt_descending - top 1 CreateAt_ascending) to calculate the session duration. is there any way to get this result.


You can create a custom field for calculating the time difference using the painless script. There is an example available at Hope it helps


Thanks for answering. i will try to understand this language haha.
Because am not so familiar with this language, it's so different from SQL.

Yes, There is a learning curve. Here is a brief walkthrough which might help:

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.