I am not sure if this has been asked and answered (my searches have not returned results for this), So here goes :
I have an index with a timestamp of when a document was persisted to the index as well as a timestamp of when the document was actually created. I would like to measure the latency as the difference between the two time stamps and then plot it in Kibana, each message has a unique identifier. Is this possible with Timelion or with the Vanilla Kibana. Any help is much appreciated.
Can this be done in logstash to introduce a new field as the difference between the two timestamps ??