Hi team, previously I made a scripted field regarding folr calculcation time difference.
Link to previous post: Elasticsearch giving warning for painless script
time-diff: new Date().getTime() - doc['@timestamp'].value.getMillis()
I need help regarding this functioning. Using above scripted field I am displaying hosts with their last communication time.
But now i just want to display the hosts with time difference greater than, let's say, 7 days only.
Is there any way to compare the time-diff scripted field and only display those hosts that have not sent events for few days, in this case.
Really appreciate your help!!