# Sum duration activties

**URL:** <https://discuss.elastic.co/t/sum-duration-activties/40294>\
**Category:** Kibana\
**Created:** [January 27, 2016, 10:22pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294 "2016-01-27T22:22:02Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![TJarriault](https://avatars.discourse-cdn.com/v4/letter/t/b19c9b/32.png) [@TJarriault](https://discuss.elastic.co/u/TJarriault)\
**Post date:** [January 27, 2016, 10:22pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294/1 "2016-01-27T22:22:02Z")

</div>

Hi,

Is it possible to create a chart to track users activity (with entries elasticsearch, time filed AAAAMMJJ HH:MM:SS =\> filed 1 : begin connection, filed 2 : end connection) ?

Regards,

Tony

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [January 29, 2016, 2:48pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294/2 "2016-01-29T14:48:21Z")

</div>

If I'm understanding your use case correctly, I think a [scripted field](https://www.elastic.co/guide/en/kibana/current/managing-fields.html#create-scripted-field) would solve the problem.

You could create a scripted field called `time_connected`:

doc.['end\_connection'].value - doc.['begin\_connection'].value

And then you could visualize this field in the Visualize tab. If that's not what you're looking for, please provide more details on what you're trying to achieve.

---

<div class="post-metadata">

**Author:** ![TJarriault](https://avatars.discourse-cdn.com/v4/letter/t/b19c9b/32.png) [@TJarriault](https://discuss.elastic.co/u/TJarriault)\
**Post date:** [January 29, 2016, 4:27pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294/3 "2016-01-29T16:27:51Z")

</div>

Hi Matt,

Is it possible in the same graph, to have a sum of user by time slot.

For exemple elasticsearch entries :  
Entry 1 :  
LoginTime : 2015-12-31T20:58:00  
LogoutTime : 2015-12-31T23:10:00  
UserName : XX

Entry 2 :  
LoginTime : 2015-12-31T20:58:00  
LogoutTime : 2015-12-31T23:10:00  
UserName : XX

Is it possible to generate a graph for a period, cutting by hour with sum of user during this time ?

[cid:image001.png@01D15ABA.176F6BD0]

Regards,

Tony

De : Matt Bargar [[mailto:noreply@discuss.elastic.co](mailto:noreply@discuss.elastic.co)]  
Envoyé : vendredi 29 janvier 2016 15:59  
À : JARRIAULT, Tony  
Objet : [Kibana] Sum duration activties

[[https://sea2.discourse-cdn.com/elastic/user\_avatar/discuss.elastic.co/bargs/45/5429\_1.png](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/45/5429_1.png)]

Bargs[http://discuss.elastic.co/users/bargs](http://discuss.elastic.co/users/bargs) Matt Bargar[http://discuss.elastic.co/users/bargs](http://discuss.elastic.co/users/bargs)  
January 29

If I'm understanding your use case correctly, I think a scripted field[https://www.elastic.co/guide/en/kibana/current/managing-fields.html#create-scripted-field](https://www.elastic.co/guide/en/kibana/current/managing-fields.html#create-scripted-field) would solve the problem.

You could create a scripted field called time\_connected:

doc.['end\_connection'].value - doc.['begin\_connection'].value

And then you could visualize this field in the Visualize tab. If that's not what you're looking for, please provide more details on what you're trying to achieve.

To respond, reply to this email or visit the topic[http://discuss.elastic.co/t/sum-duration-activties/40294/2](http://discuss.elastic.co/t/sum-duration-activties/40294/2).  
 ![](https://us1.discourse-cdn.com/elastic/original/2X/0/06020dac39121d32e24212c38d1491de2cec1b9a.png)

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [January 29, 2016, 4:46pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294/4 "2016-01-29T16:46:03Z")

</div>

So want the number of unique users who have logged in each hour? Or you want the total number of times each user has logged in, per hour?

---

<div class="post-metadata">

**Author:** ![TJarriault](https://avatars.discourse-cdn.com/v4/letter/t/b19c9b/32.png) [@TJarriault](https://discuss.elastic.co/u/TJarriault)\
**Post date:** [January 29, 2016, 9:33pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294/5 "2016-01-29T21:33:51Z")

</div>

Hi Matt,  
I want the number of unique user for each hour

regards,

[Prosodie-signature][http://www.prosodie.com/](http://www.prosodie.com/)

Tony JARRIAULT – Responsable de groupe Mise en Service Technique  
PROSODIE - Division Front Office Platform  
Tél. : +33 (0)1.34.49.06.43(TOIP/Mobile)  
Fax : +33 (0)1.34.49.06.79  
[tjarriault@prosodie.com](mailto:tjarriault@prosodie.com)[mailto:tjarriault@prosodie.com](mailto:tjarriault@prosodie.com)

8, rue Grange Dame Rose - 78457 Velizy-Villacoublay Cedex  
P afin de contribuer au respect de l'environnement, merci de n'imprimer ce mail qu'en cas de nécessité

De : Matt Bargar [[mailto:noreply@discuss.elastic.co](mailto:noreply@discuss.elastic.co)]  
Envoyé : vendredi 29 janvier 2016 17:56  
À : JARRIAULT, Tony  
Objet : [Kibana] Sum duration activties

[[https://sea2.discourse-cdn.com/elastic/user\_avatar/discuss.elastic.co/bargs/45/5429\_1.png](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/45/5429_1.png)]

Bargs[http://discuss.elastic.co/users/bargs](http://discuss.elastic.co/users/bargs) Matt Bargar[http://discuss.elastic.co/users/bargs](http://discuss.elastic.co/users/bargs)  
January 29

So want the number of unique users who have logged in each hour? Or you want the total number of times each user has logged in, per hour?

To respond, reply to this email or visit the topic[http://discuss.elastic.co/t/sum-duration-activties/40294/4](http://discuss.elastic.co/t/sum-duration-activties/40294/4).  
 ![](https://us1.discourse-cdn.com/elastic/original/2X/b/bbebf92f4d00714745426bd40b58a0d5452257b3.gif)

---

<div class="post-metadata">

**Author:** ![Bargs](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/bargs/32/5429_2.png) [@Bargs](https://discuss.elastic.co/u/Bargs)\
**Post date:** [January 29, 2016, 11:12pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294/6 "2016-01-29T23:12:01Z")

</div>

That should be fairly easy to accomplish. You just need to create a date histogram with an hourly interval and a unique count aggregation on the UserName field as your metric. Something like this:

 ![](https://us1.discourse-cdn.com/elastic/original/2X/b/ba0a3e277a43465e0ba7127c20e8753e8fc6613a.png)

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 2:03pm UTC](https://discuss.elastic.co/t/sum-duration-activties/40294/7 "2017-07-06T14:03:46Z")

</div>


