Manipulate fields in Kibana

Hello. We are using ELK 7.6.2 stack.

Kibana console shows the fields as follows:

image

I want to introduce/ add a new field displayed as say "sum" and it should display the sum of "before" and "after" (highlighted as yellow in the picture).

Can this be done using the Kibana console?

Please guide.

Hello @zaeemmasood

Have you looked at using scripted fields? Scripted fields | Kibana Guide [7.6] | Elastic

Kibana 7.11 and newer introduces runtime fields and deprecates scripted fields. The apis are a little different but the scripting languages are very similar.

Thanks. It worked!

Just added the following script:

doc['before'].value - doc['after'].value

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.