I create painless script: if (doc.containsKey('request.timestamp') && doc.containsKey('response.timestamp')) { return (doc['response.timestamp'].value - doc['request.timestamp'].value) } return null; It's mean that if field: request.timestamp and response.timestamp exists, then calculate the time …

OK! I resolved my problem: if (!doc['response.timestamp'].empty && !doc['request.timestamp'].empty) { return (doc['response.timestamp'].date.millisOfDay - doc['request.timestamp'].date.millisOfDay)} else { return null;} :star_struck: thank you @bhavyarm for your attention

Painless, if two field exists then calculate

Elastic Stack Kibana

srolskyi (Serg Rolskyi) January 30, 2018, 3:07pm 6

Hi,
I open the same event on two different ELK (5.5.1 and 6.1.1) on kibana and switch to "json" view:

all timestamp fields for version 6.1.1 have a format "text" for version 5.1.1 have format "Unix time". Fields have the same look and same type = date, difference only in "json" view.
for my script, I chose type =number, Format = Number.
this works on es 5.5.1

Scripted Fields + Filtering

Topic		Replies	Views
Timestamp Difference between two fields Kibana	4	2032	August 7, 2018
Creating a new field through painless scripts to calculate the difference between two timestamp Kibana painless	3	538	November 2, 2020
If else Painless Script on a Painless Scripted Field Kibana painless	5	5900	July 28, 2020
Painless script to get date difference Kibana painless	3	3515	April 10, 2020
Elasticsearch & kibana 6.4: Painless scripting is not providing result while doing substraction between two timestamps, which are in string Kibana	2	389	January 31, 2019

Painless, if two field exists then calculate

Related topics