about delay part:
see for example below log in application log file:
2015-07-16 10:08:49 ERROR  [org.springframework.security.web.FilterChainProxy] - Some Error with statctrace
I called this timestamp as event log time. I am storing it under the customized field "eventTime". There is another time (@timestamp) created internally which is nothing but the entry time of the event in the datastore.
Ideally this time should be almost same (may be the diff in only few seconds). But in my system, the difference is in minutes. This might be due to middlewares like shipper, broker indexer, load balancers.
Sometimes the log created on 13th July stored on 14th July. this may happen at the time of date change (around midnight). This is the delay I am talking about. And I want this delay to be as minimum as possible.
That's why I want event log time as new field and the calendar should work on this field only, so that user can search the error logs correctly by selecting most possible combination of from and to date with timestamp.
Example: to search the stacktrace of error above, he will select the date 16th july from calendar and timestamp in between 10:07:00 and 10:09:00 .