Hi,
I am using the elapsed plugin to calculate the elapsed time between start and stop events. I am interested in visualizing start events that are currently running (do not yet have stop events). I have not been able to find a way to visualize this in Kibana. If it's possible that would be my preferred solution, to track events by their elapsed id which have start but not matching stop events.
I am currently looking to solve this problem by tweaking the configuration of the elapsed filter in the logstash config file. Is there a way to add or remove tags to the start event after the end event has been found? The plugin supports adding and removing tags but I need to figure out how to do so with events that already exist. Any help would be really appreciated!