Maintaining "time delta" between events when reindexing

[leandrojmp (Leandro Pereira)]

@petlit2049

Is this possible at all given the tools at hand?

I don't think this is possible without using an external tool.

In both Logstash and Elasticsearch the events are independent from each other, what you want is to have the timestamp of one event dependent of the timestamp of the previous event.