# Logstash filter ruby create new event?
**URL:** https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377
**Category:** Logstash
**Created:** [August 14, 2015, 7:33am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377 "2015-08-14T07:33:55Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@quejinho](https://discuss.elastic.co/u/quejinho)
#### Post date: [August 14, 2015, 7:33am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377/1 "2015-08-14T07:33:55Z")
I am planning to create a time difference betwen one logstash and another so in second one i made a ruby code to make a time difference. Although i am quite there i need to not add a field to an event but to create a new event with that how could i do it ?
I tried
code =\> '["delta\_time"] = Time.now.to\_i - event["@timestamp"].to\_i '
but it gives an error.
---
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 19, 2015, 5:31am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377/2 "2015-10-19T05:31:05Z")
So were you able to do it ? i have a similar usecase can i get your help?
---
### Author:  [@german23](https://discuss.elastic.co/u/german23)
#### Post date: [October 19, 2015, 5:45am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377/3 "2015-10-19T05:45:17Z")
hi, try:
ruby {
code =\> "event['delta\_time'] = Time.now.to\_i - event['@timestamp'].to\_i"
}
that should be at least the right logstash syntax
---
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 19, 2015, 5:47am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377/4 "2015-10-19T05:47:41Z")
"Time.now.to\_i " what does it tell? can you share your config file? actually i want calculate time difference between each event so that i can see which even had maximum gap and should look into it.
Please help
---
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 19, 2015, 7:06am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377/5 "2015-10-19T07:06:50Z")
ok i got it what it does. can we subtract present event with last event time difference?
---
### Author:  [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)
#### Post date: [October 20, 2015, 7:43am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377/6 "2015-10-20T07:43:34Z")
i am facing an issue that when i take timestamp (one of the field in my logs) when i use to\_i with it it takes just year .
"time" =\> 2015,
when my config was : event['time'] = event['timestamp'].to\_i
so result is coming wrong
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:26am UTC](https://discuss.elastic.co/t/logstash-filter-ruby-create-new-event/27377/7 "2017-07-06T05:26:05Z")