Response Time Report

[chivas]

Hello,
I need to generate a Visual/Report which shows the response time taken by an API/function call to my webserver from the client. Below is my data in Elasticsearch.

So my question is what is the best way to generate a report which shows the time between the REQ and RES for the same id, for a function/API call. My requirement is that I should be able to see visually if the Response time for a particular API call (function in the snapshot) is increasing, or staying the same?
Can I do it with existing data structure? Any pointers will also be helpful.

Thanks!

[Nathan_Reese]

Can I do it with existing data structure? Any pointers will also be helpful.

You will need both the request and response times in the same document. One way to do this is to set up an enrichment processor to add the request to a response document.

[chivas]

Thanks for your response, I managed to get the Request and Response time in same document, not my document looks like below

Time is the Response time and reqTime is the time of Request for this particular response.

So, now my question is should I subtract these two timings in logstash or use Kibana Painful Script variable?

[Nathan_Reese]

scripted fields and runtime fields have a performance penalty since they are calculated at read time. If possible, it's best to add fields at ingest time, so if you can, it makes sense to add to logstash configuration.