# Visualization kibana probleme for sum

**URL:** https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286
**Category:** Kibana
**Created:** [January 22, 2019, 6:33pm UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286 "2019-01-22T18:33:17Z")
**Posts on this page:** 8
**Page:** 1

<div class="post-metadata">

### Author: ![ludo\_ramos](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ludo_ramos/32/40094_2.png) [@ludo\_ramos](https://discuss.elastic.co/u/ludo_ramos)
#### Post date: [January 22, 2019, 6:33pm UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/1 "2019-01-22T18:33:17Z")

</div>

Hi,

I have a csv file of Cdr call VOIP

I want to view total duration (field ="Durée de la conversation") of one number destination (0611630000) but i don't success for that

I have the information with logstash -\> Elasticsearch :

> {  
> "\_index": "commerce-2019.01.18",  
> "\_type": "doc",  
> "\_id": "fgusdmgBJeUeACgN3n18",  
> "\_score": 1,  
> "\_source": {  
> "Nombre de mise en attente": "0",  
> "Numéro SDA taxé": "0171800000",  
> "Durée de la conversation": "00:08:12",  
> "Département de l'Appelant": "Commercial",  
> "Redirection": "-",  
> "Type d'appel pour la Facturation": "appel externe",  
> "Type de l'Appelé": "EXTERNAL\_NUMBER",  
> "Durée de sonnerie": "00:00:12",  
> "Périphérique de l'Appelé": "[sip-gateway].(SBC).0611630000",  
> "Label de l'Appelé": "0611630000",  
> "Label de l'Appelant": "dupond",  
> "Billing 2": "Siege",  
> "Billing 1": "test",  
> "Timestamp début": "18/01/2019 09:26:50",  
> "PSTN de l'Appelé": "0611630000",  
> "Diagnostique": "-",  
> "AAASESSIONID": "-",  
> "Communauté": "test-community",  
> "Timestamp fin": "18/01/2019 09:35:13",  
> "ID de l'Enregistrement CDR ": "SID-CDR-TEST",  
> "Pages de Fax": "-",  
> "Type d'appel": "Outgoing external",  
> "Initiateur de l'Appel": "1083",  
> "Appelé": "0611630000",  
> "Appelant": "1083",  
> "Durée de mise en attente": "00:00:00",  
> "SIP Call ID 2": "-",  
> "ID de l'Appel": "CId[1367303]",  
> "@timestamp": "2019-01-18T08:26:50.000Z",  
> "@version": "1",  
> "adresse IP": "1X.X.X.X:5060",  
> "Site de l'Appelant": "Siege-ALL",  
> "SIP Call ID 1": "a977269a-2280-d550-3858-1fe7db8357a0@10.Y.Y.Y",  
> "Durée de la conf": "00:00:00",  
> "terminal distant appelé": "-",  
> "Numéro Composé": "00611630000",  
> "terminal distant appelant": "-",  
> "host": "elk",  
> "Etat du CDR": "Succès",  
> "ID du Flux d'Appel ": "SID-CDR-TEST",  
> "Type de l'Appelant": "STATION",  
> "IPTC": "09",  
> "Timestamp de Redirection": "-",  
> "ID du prochain CDR": "-",  
> "Périphérique de l'Appelant": "[csip-yealink-t41p]",  
> "Cause de fin": "Terminé par l'appelant"  
> },  
> "fields": {  
> "@timestamp": [  
> "2019-01-18T08:26:50.000Z"  
> ]  
> }  
> }

Help me please I'm news on ELK

thank's

ps : Excuse my english I use google translate, I'm french

---

<div class="post-metadata">

### Author: ![lukas](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lukas/32/6812_2.png) [@lukas](https://discuss.elastic.co/u/lukas)
#### Post date: [January 22, 2019, 11:37pm UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/2 "2019-01-22T23:37:03Z")

</div>

From what I can see, you don't have a `duration` field in your data, just a start and end timestamp. Is that correct?

If so, you'll need to create a scripted field that calculates the duration by subtracting the start from the end. Then you can create a visualization over the sum of `duration` and create a filter for the specific number.

---

<div class="post-metadata">

### Author: ![ludo\_ramos](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ludo_ramos/32/40094_2.png) [@ludo\_ramos](https://discuss.elastic.co/u/ludo_ramos)
#### Post date: [January 23, 2019, 8:40am UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/3 "2019-01-23T08:40:59Z")

</div>

Hi

thank's for your reply

I have The duration field =\> "Durée de la conversation": "00:08:12"

when I test to add visualizatoin for sum de duration field I have this message :

![2019-01-23_09-39-05](https://us1.discourse-cdn.com/elastic/original/3X/d/d/dd056583ed3680f26b3c6c07375134da1b522d93.png)

But I don't know how to configure field type number 😟

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 23, 2019, 9:06am UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/4 "2019-01-23T09:06:10Z")

</div>

That is not a number, so you can not map it as such. I would recommend converting it to seconds before indexing it into Elasticsearch, as there is no built in support for durations in that format.

---

<div class="post-metadata">

### Author: ![ludo\_ramos](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ludo_ramos/32/40094_2.png) [@ludo\_ramos](https://discuss.elastic.co/u/ludo_ramos)
#### Post date: [January 23, 2019, 9:36am UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/5 "2019-01-23T09:36:59Z")

</div>

Thank's for your reply

Do you have a Url to explain this converting in logstash ?

merci

---

<div class="post-metadata">

### Author: ![ludo\_ramos](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ludo_ramos/32/40094_2.png) [@ludo\_ramos](https://discuss.elastic.co/u/ludo_ramos)
#### Post date: [January 23, 2019, 9:53am UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/6 "2019-01-23T09:53:24Z")

</div>

I found this in other topic

# convert duration from hour:min:second 00:00:00 into a float of minutes

csv {  
# hour:min:second  
columns =\> ["hours", "minutes", "seconds"]  
source =\> "voice\_duration"  
separator =\> ":"  
}

ruby {  
code =\> "event.set('duration', ( (event.get('hours').to\_f \* 60) + event.get('minutes').to\_f + (event.get('seconds').to\_f / 60 )))"  
}  
mutate {  
remove\_field =\> ["voice\_duration", "hours", "minutes", "seconds"]  
}

IT's ok my field or not ?

---

<div class="post-metadata">

### Author: ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [January 23, 2019, 10:24am UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/7 "2019-01-23T10:24:07Z")

</div>

Did you try it? Did it work?

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 20, 2019, 10:32am UTC](https://discuss.elastic.co/t/visualization-kibana-probleme-for-sum/165286/8 "2019-02-20T10:32:55Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
