Simple painless date different calculated field

Elastic Stack Kibana
1

Should something like this work?
doc['timestamp'].value - doc['data.LOGON_TIME'].value;

I've tried numerous variations. Setting variables. using a return statement.

I basically just need to know how many milliseconds or seconds between these 2 fields.

I get this message in Discover:
Courier Fetch: 5 of 25 shards failed.

2

Hi @BrianBeaulieu,

you should be able to access the millisecond values as longs using doc['timestamp'].value.millis and doc['data.LOGON_TIME'].value.millis respectively.