Hi All, i'm trying to calculate the time difference between 2 dates. I'm capturing the data through jdbc Input "opentime" : "2020-11-01T11:42:59.000Z", "resolvedtime" : "2020-11-02T22:38:37.000Z", Code filter { date { match => ["opentime", "ISO8601"] } date { match => ["resolvedti…

[image] Rebin: date { match => ["opentime", "ISO8601"] } That will set [@timestamp]. You should use date { match => ["opentime", "ISO8601"] target => "opentime" } to overwrite [opentime]. Similarly for [resolvedtime]. Then use .to_i as ParashB pointed out.

Discuss the Elastic Stack

Time Duration difference calculation in Logstash

Elastic Stack Logstash

ParashB (Paras) February 9, 2021, 2:35pm 6

I hope this would be helpful for you

Convert Elapsed Time to Duration

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.