# Time Difference between two logs
**URL:** https://discuss.elastic.co/t/time-difference-between-two-logs/314028
**Category:** Kibana
**Created:** [September 9, 2022, 3:14am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028 "2022-09-09T03:14:44Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [September 9, 2022, 3:14am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/1 "2022-09-09T03:14:44Z")
I have two logs.
log1 is the start of the process and log2 is the end of the process. How can I get the time taken to complete the process. that is the difference between log2 and log 1.
And also I have log3 , now how do I find the time difference between log3 and log 2
---
### Author:  [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)
#### Post date: [September 9, 2022, 8:46am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/2 "2022-09-09T08:46:03Z")
Hi @Anil_Alapati
welcome to the Kibana community.
May I ask what is the structure of a document?
Are log1, log2, log3 just different document with a single timestamp or fields of the same document ( i.e. `{log1: ..., log2: ..., log3: ... }` )?
I've often seen this type of use case where documents store a `start` and `end` timestamp value, so using a runtime script can be leveraged to compute a `duration` field.
---
### Author:  [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [September 9, 2022, 8:51am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/3 "2022-09-09T08:51:55Z")
Hi Macro,
Thank you for the response.
each log belongs to one document.
Log1 belongs to Document 1 and log2 belongs to Document2 and log3 belongs to Document 3
I can see in every log start, that there is a @timestamp .
when I expand the document i can see two variables with the name @timestamp but both of the have the same value
---
### Author:  [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)
#### Post date: [September 9, 2022, 9:28am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/4 "2022-09-09T09:28:16Z")
I see.
If you need to compute something between two distinct document I think that [Transforming data | Elasticsearch Guide [8.4] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/transforms.html) is the best way to achieve that.
Runtime or scripted field are able to operate only at the single document level, while aggregations won't deal with specific documents.
---
### Author:  [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [September 9, 2022, 9:35am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/5 "2022-09-09T09:35:58Z")
Okay. Thank you. is 8.4 the new version and if i have 7.16.3 I may not be able to do right?
---
### Author:  [@Marco\_Liberati](https://discuss.elastic.co/u/Marco_Liberati)
#### Post date: [September 9, 2022, 10:06am UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/6 "2022-09-09T10:06:21Z")
Data transformation is available also in 7.16: [Transforming data | Elasticsearch Guide [7.16] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/7.16/transforms.html)
---
### Author:  [@Anil\_Alapati](https://discuss.elastic.co/u/Anil_Alapati)
#### Post date: [September 9, 2022, 1:11pm UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/7 "2022-09-09T13:11:05Z")
Hi Macro,
Thank you for the information.
Other than this document, is there any detailed explanation or sample code. to understand better with minimal knowledge on kibana?
Thank you.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 7, 2022, 1:12pm UTC](https://discuss.elastic.co/t/time-difference-between-two-logs/314028/8 "2022-10-07T13:12:01Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.