I'd like to perform date math in a scripted field. The only two languages available are Painless and Expressions. Want to calculate the duration between a date field and current date/time. Here is what I have, it doesn't work and gives a compilation error. LocalDateTime.now().value- doc['@timesta…

[image] kb2295: LocalDateTime.now().value Painless intentionally doesn't expose .now() style methods per Groovy to Painless; get current date time You can get the milliseconds of the document's @timestamp field using the following doc['@timestamp'].value.getMillis()

Just to be clear, that will give me the number of miliseconds passed since the timestamp?

No, it won't. doc['@timestamp'].value.getMillis() gives you the absolute number of milliseconds that the document's @timestamp field is past the epoch. Painless intentionally doesn't exist .now() style methods and recommends alternate approaches since the clocks on the various Elasticsearch nodes ar…

So is there any way of calculating how much time has passed since a timestamp?

@kb2295 if you were using ES directly, you could pass the current datetime as a parameter to the script so we had a consistent thing to compare against, but this isn't really feasible in the context of Kibana since we don't support that. Would you mind elaborating on the end-result that you're tryi…

I have a field in each doc called "lastUpdated" this is a time field that captures the time the specified doc was updated. I need to see how long it's been in real time since the doc was updated.

Are you trying to create a chart/graph using this information, or just display it in a tabular format?

I'm trying to make a chart from it. A chart which would tell me X documents were last updated less than 30 minutes ago, Y documents were updates less than 60 mins ago...

So when I replace @timestamp with the name of the field, "lastUpdatedBy" it doesn't work?

Discuss the Elastic Stack

Scripted Fields Date Math

Elastic Stack Kibana

Brandon_Kobel (Brandon Kobel) November 29, 2018, 7:37pm 10

You can do this using the Filters aggregation like the following:

Topic		Replies	Views
Script Field in Kibana with Time Passed Since Timestamp Kibana	3	2387	July 6, 2017
Get the date right now Kibana	6	2190	January 31, 2018
Access current time in kibana scripted field Kibana	5	2763	July 6, 2017
Kibana, getting todays date Kibana	9	8653	June 12, 2017
Compare two date/timestamp in Kibana Kibana	5	14237	July 11, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Scripted Fields Date Math

Related topics