# Kibana scripted fields update by elasticsearch query

**URL:** <https://discuss.elastic.co/t/kibana-scripted-fields-update-by-elasticsearch-query/224136>\
**Category:** Kibana\
**Created:** [March 18, 2020, 3:33pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-update-by-elasticsearch-query/224136 "2020-03-18T15:33:33Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![zozo6015](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zozo6015/32/12117_2.png) [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Post date:** [March 18, 2020, 3:33pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-update-by-elasticsearch-query/224136/1 "2020-03-18T15:33:33Z")

</div>

Hello,

I am wondering if it's possible to create a scripted field by subtracting a field value from the resulted from an elasticsearch query.

Regards,  
Peter

---

<div class="post-metadata">

**Author:** ![LizaD](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lizad/32/51074_2.png) [@LizaD](https://discuss.elastic.co/u/LizaD)\
**Post date:** [March 18, 2020, 8:45pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-update-by-elasticsearch-query/224136/2 "2020-03-18T20:45:03Z")

</div>

Hi @zozo6015,

Can you give me a bit more detail? Here is a good blog that may help:

> **[Using Painless in Kibana scripted fields](https://www.elastic.co/blog/using-painless-kibana-scripted-fields)**
>
> This blog presents common use cases for Kibana scripted fields, and walks user through how to create scripted fields in a newly set-up Elastic Cloud instance.

Thanks,  
Liza

---

<div class="post-metadata">

**Author:** ![zozo6015](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zozo6015/32/12117_2.png) [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Post date:** [March 18, 2020, 8:50pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-update-by-elasticsearch-query/224136/3 "2020-03-18T20:50:16Z")

</div>

I have an index with with some fields that has a cumulative values added up for each day. So if each day increases I would like to get a scripted field of the difference between day1 and day2. So I was thinking if it's possible to use a query in the elasticsearch in a scripted field script for @timestamp-1d and get the data of the field for the previous day then I would just do a subtraction of current day .value - the value got from the elasticsearch query.

I am not sure if that is possible since as far as I read the scripted fields works only on curent document.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 15, 2020, 8:58pm UTC](https://discuss.elastic.co/t/kibana-scripted-fields-update-by-elasticsearch-query/224136/4 "2020-04-15T20:58:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.