I am trying to push all our team's tickets into ELK. The tickets have 5 date fields and I have 2 questions in this regard. I have all the data in the same index. The 5 different date fields:
Question 1: I want the event to be displayed for each of these 5 time instances when any of these are falling in the timepicker range in Kibana. Do I need to insert the same event multiple (5) times and associating each datefield with @Timestamp ? My time series chart is created with Date Histogram with @Timestamp.
Question 2: There are some events which span over days. Let us say that the start_date and end_date are 6hrs apart - for example from 06:00 till 12:00. When I am searching for any events ongoing between 08:00 and 10:00, I do not find this event. Anyway to accomplish this ?
Thanks in advance for your support