# Start and stop events in logfiles

**URL:** https://discuss.elastic.co/t/start-and-stop-events-in-logfiles/26099
**Category:** Elasticsearch
**Created:** [July 22, 2015, 4:02pm UTC](https://discuss.elastic.co/t/start-and-stop-events-in-logfiles/26099 "2015-07-22T16:02:05Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![stobbe99](https://avatars.discourse-cdn.com/v4/letter/s/bc8723/32.png) [@stobbe99](https://discuss.elastic.co/u/stobbe99)
#### Post date: [July 22, 2015, 4:02pm UTC](https://discuss.elastic.co/t/start-and-stop-events-in-logfiles/26099/1 "2015-07-22T16:02:05Z")

</div>

I have build a script on windows measuring time between two coresponding events. E.q. start-event and stop-event. Can this also be done with Elasticsearch?

KR Henk Stobbe

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [July 22, 2015, 4:19pm UTC](https://discuss.elastic.co/t/start-and-stop-events-in-logfiles/26099/2 "2015-07-22T16:19:22Z")

</div>

Not with Elasticsearch itself, but I suspect Logstash's [elapsed filter](https://www.elastic.co/guide/en/logstash/current/plugins-filters-elapsed.html) could help you.

---

<div class="post-metadata">

### Author: ![stobbe99](https://avatars.discourse-cdn.com/v4/letter/s/bc8723/32.png) [@stobbe99](https://discuss.elastic.co/u/stobbe99)
#### Post date: [July 22, 2015, 4:51pm UTC](https://discuss.elastic.co/t/start-and-stop-events-in-logfiles/26099/3 "2015-07-22T16:51:41Z")

</div>

Thx, exactly what I was looking for!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 11:59pm UTC](https://discuss.elastic.co/t/start-and-stop-events-in-logfiles/26099/4 "2017-07-05T23:59:53Z")

</div>