Using runtime field in another runtime field in Kibana index template

Elastic Stack Kibana
1

I have a runtime field called "throughput_in" with type long and the following script:

throughput_in:
emit(doc['volume_uplink'].value / doc['duration'].value)

and a field called "throughput_out" with type long:

throughput_out:
emit(doc['volume_downlink'].value / doc['duration'].value)

I want to use the runtime field in another runtime field called "throughput_total" with type long:

throughput_total:
emit(doc['throughput_in'].value + doc['throughput_out'].value)

but the autocomplete doesn't show the runtime field. Is doing this possible?

2

Hi @mikhatanu

maybe a composite runtime field can work in your case?

3

I found out that you can use runtime field to another runtime field (in this case, using runtime field throughput_in and throughput_out to produce throughput_total). The field just doesn't appear in autocomplete, but it is possible to do it.