just run below aggregate filter url example unable to get total sql duration please find below output logs as i have same requirement . Please let me know if i missed anything
https://www.elastic.co/guide/en/logstash/current/plugins-filters-aggregate.html
out put -
{"@version":"1","tags":["beats_input_codec_plain_applied"],"host":{"name":"02HW031471"},"@timestamp":"2018-12-21T03:46:28.173Z","offset":35,"taskid":"12345","loglevel":"INFO","fields":{"log_type":"test-forum"},"logger":"SQL","input":{"type":"log"},"message":"INFO - 12345 - SQL - sqlQuery1 - 12","prospector":{"type":"log"},"source":"C:\ELK-Setup\RFT_LT\sanju\aggregate-forum-log.txt","beat":{"hostname":"02HW031471","name":"02HW031471","version":"6.4.2"},"duration":12,"label":"sqlQuery1"}
{"@version":"1","tags":["beats_input_codec_plain_applied"],"host":{"name":"02HW031471"},"@timestamp":"2018-12-21T03:46:28.160Z","offset":0,"taskid":"12345","loglevel":"INFO","fields":{"log_type":"test-forum"},"logger":"TASK_START","input":{"type":"log"},"message":"INFO - 12345 - TASK_START - start","prospector":{"type":"log"},"source":"C:\ELK-Setup\RFT_LT\sanju\aggregate-forum-log.txt","beat":{"hostname":"02HW031471","name":"02HW031471","version":"6.4.2"},"label":"start"}
{"@version":"1","tags":["beats_input_codec_plain_applied"],"host":{"name":"02HW031471"},"@timestamp":"2018-12-21T03:46:28.193Z","offset":72,"taskid":"12345","loglevel":"INFO","fields":{"log_type":"test-forum"},"logger":"SQL","input":{"type":"log"},"message":"INFO - 12345 - SQL - sqlQuery2 - 34","prospector":{"type":"log"},"source":"C:\ELK-Setup\RFT_LT\sanju\aggregate-forum-log.txt","beat":{"hostname":"02HW031471","name":"02HW031471","version":"6.4.2"},"duration":34,"label":"sqlQuery2"}