How can I Subtract term X from Y on the same log?
I saw this, but it doesn't do any arithmetical use. (This uses mutate).
I also tried through a scripted field in Kibana but the fields are not saved in ES and I need to later use them.
I also tried through the ruby filter:
event['delay'] = (event['old1']-event['old2'])
but it didnt result with any thing
Help will be greatly appreciated.