# \#runtime

**URL:** https://discuss.elastic.co/tag/runtime/134.md

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

---

## [Logstash - %{+YYYY} returns a year two years behind around year boundary – how is this possible?](https://discuss.elastic.co/t/logstash-yyyy-returns-a-year-two-years-behind-around-year-boundary-how-is-this-possible/384359)

<div class="topic-metadata">

**Author:** [@josh\_tran](https://discuss.elastic.co/u/josh_tran)\
**Replies:** 12\
**Last updated:** [January 15, 2026, 9:46am UTC](https://discuss.elastic.co/t/logstash-yyyy-returns-a-year-two-years-behind-around-year-boundary-how-is-this-possible/384359 "2026-01-15T09:46:00Z")

</div>

I have a Logstash pipeline where I build a timestamp string manually and then parse it into event.timestamp because we do not have a year value in the log message, there are just day and month in the file name. Environm…

---

## [Is Logstash 7.4.2 supported on AIX server](https://discuss.elastic.co/t/is-logstash-7-4-2-supported-on-aix-server/381207)

<div class="topic-metadata">

**Author:** [@Shubham.Kumar](https://discuss.elastic.co/u/Shubham.Kumar)\
**Replies:** 1\
**Last updated:** [August 21, 2025, 12:53pm UTC](https://discuss.elastic.co/t/is-logstash-7-4-2-supported-on-aix-server/381207 "2025-08-21T12:53:13Z")

</div>

Hi, I'm trying to deploy Logstash version 7.4.2 on an AIX server and wanted to check if this setup is officially supported or if anyone has experience running it in a similar environment. The server runs AIX 7.0.0, and …

---

## [Cross Cluster Replication: To find overall time taken for data replication](https://discuss.elastic.co/t/cross-cluster-replication-to-find-overall-time-taken-for-data-replication/373750)

<div class="topic-metadata">

**Author:** [@lochinvar](https://discuss.elastic.co/u/lochinvar)\
**Replies:** 0\
**Last updated:** [January 27, 2025, 10:50pm UTC](https://discuss.elastic.co/t/cross-cluster-replication-to-find-overall-time-taken-for-data-replication/373750 "2025-01-27T22:50:28Z")

</div>

Hi All, I have done CCR setup and was able to get the existing data replicated from leader to follower. Working on to know the overall time taken to replicate the data from leader to follower. I ran "\_ccr/stats" to gat…

---

## [I need to show hosts with uptime less than selected timeFilter](https://discuss.elastic.co/t/i-need-to-show-hosts-with-uptime-less-than-selected-timefilter/373027)

<div class="topic-metadata">

**Author:** [@shreedharanand](https://discuss.elastic.co/u/shreedharanand)\
**Replies:** 0\
**Last updated:** [January 9, 2025, 7:06pm UTC](https://discuss.elastic.co/t/i-need-to-show-hosts-with-uptime-less-than-selected-timefilter/373027 "2025-01-09T19:06:35Z")

</div>

I am using Kibana 8.12. I need to create a visualization which shows the unique count of host which is having uptime less than equal to the selected timeFilter. uptime coming from metricset is in ms. For example - If t…

---

## [Creating jmeter transaction comparison table using Runtime Fields](https://discuss.elastic.co/t/creating-jmeter-transaction-comparison-table-using-runtime-fields/370863)

<div class="topic-metadata">

**Author:** [@2bitlong](https://discuss.elastic.co/u/2bitlong)\
**Replies:** 0\
**Last updated:** [November 20, 2024, 11:16pm UTC](https://discuss.elastic.co/t/creating-jmeter-transaction-comparison-table-using-runtime-fields/370863 "2024-11-20T23:16:43Z")

</div>

I am trying to build a table in lens for the Jmeter test results. The table is supposed to have 4 columns: SampleLabel 90th Perc of ResponseTime for Test1 90th Perc of ResponseTime for Test2 Difference of above 2 Resp…

---

## [Tagging - Correlating Between Datasets](https://discuss.elastic.co/t/tagging-correlating-between-datasets/368873)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 3\
**Last updated:** [October 15, 2024, 9:14pm UTC](https://discuss.elastic.co/t/tagging-correlating-between-datasets/368873 "2024-10-15T21:14:15Z")

</div>

Hello, I want to do something like add tags but to datasets. I know I can use an ingest pipeline and then apply it all ingest pipelines but this isn't practical as updates to tags can't be retroactive. Is it possible …

---

## [How to create a runtime field with an array](https://discuss.elastic.co/t/how-to-create-a-runtime-field-with-an-array/365155)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 2\
**Last updated:** [August 19, 2024, 6:25pm UTC](https://discuss.elastic.co/t/how-to-create-a-runtime-field-with-an-array/365155 "2024-08-19T18:25:43Z")

</div>

Hello, I was wondering how I can create a runtime field based on a value inside of a field array. For example I have this keyword field: fruit.names : \[kiwi, bananas, apple\] I want to create a new field based on coup…

---

## [Extracting substring from a field](https://discuss.elastic.co/t/extracting-substring-from-a-field/362656)

<div class="topic-metadata">

**Author:** [@SUMANTA\_ROY](https://discuss.elastic.co/u/SUMANTA_ROY)\
**Replies:** 5\
**Last updated:** [July 7, 2024, 9:22pm UTC](https://discuss.elastic.co/t/extracting-substring-from-a-field/362656 "2024-07-07T21:22:42Z")

</div>

A field called message contains a lot of information as below. message: xxxxxxxx /app/rest/abc 200 500ms xxxxxxxx. -\> is there a way to extract the api names and the response time only and put them in a table (without…

---

## [Cannot create runtime fields](https://discuss.elastic.co/t/cannot-create-runtime-fields/360347)

<div class="topic-metadata">

**Author:** [@Ljapunov](https://discuss.elastic.co/u/Ljapunov)\
**Replies:** 0\
**Last updated:** [May 28, 2024, 7:27am UTC](https://discuss.elastic.co/t/cannot-create-runtime-fields/360347 "2024-05-28T07:27:52Z")

</div>

Hi there, I am trying to create runtime fields via Kibana Gui and have no clue what is going on. I started on our test environment where everything is working. But my attempt to create a runtime field in productive envi…

---

## [Determining the count of words in a given field](https://discuss.elastic.co/t/determining-the-count-of-words-in-a-given-field/359578)

<div class="topic-metadata">

**Author:** [@Honestabe](https://discuss.elastic.co/u/Honestabe)\
**Replies:** 10\
**Last updated:** [May 21, 2024, 9:44pm UTC](https://discuss.elastic.co/t/determining-the-count-of-words-in-a-given-field/359578 "2024-05-21T21:44:02Z")

</div>

I wrote a painless script to determine the word count in a particular filed emit (doc\['skus.keyword'\].length) the problem is that it doesn't count duplicates. so if there is more than one of the same keyword it only…

---

## [Runtime Field - How to create a field (scripted field)](https://discuss.elastic.co/t/runtime-field-how-to-create-a-field-scripted-field/357430)

<div class="topic-metadata">

**Author:** [@ek9boy](https://discuss.elastic.co/u/ek9boy)\
**Replies:** 1\
**Last updated:** [April 17, 2024, 7:24am UTC](https://discuss.elastic.co/t/runtime-field-how-to-create-a-field-scripted-field/357430 "2024-04-17T07:24:56Z")

</div>

Hi, I have a date value: @timestamp: 2024-04-01T12:08:00:548Z I want to use the scripted field / runtime field option to creat a new field based on the logic below: IF @timestamp \>= 10 minutes Then ten\_minute\_breac…

---

## [Runtime Field issue in indexes that contain nested objects](https://discuss.elastic.co/t/runtime-field-issue-in-indexes-that-contain-nested-objects/351737)

<div class="topic-metadata">

**Author:** [@victorhmorales](https://discuss.elastic.co/u/victorhmorales)\
**Replies:** 0\
**Last updated:** [January 24, 2024, 3:52pm UTC](https://discuss.elastic.co/t/runtime-field-issue-in-indexes-that-contain-nested-objects/351737 "2024-01-24T15:52:45Z")

</div>

Hello there, I'm trying to use Runtime Fields in indexes that contain nested objects, but it's not working. I tried to add them by 'Discover', 'Lens Editor, 'Data View management' and also 'Kibana Dev Tools'. I'm runni…

---

## [Elastic runtimes fields](https://discuss.elastic.co/t/elastic-runtimes-fields/350677)

<div class="topic-metadata">

**Author:** [@Rossana](https://discuss.elastic.co/u/Rossana)\
**Replies:** 3\
**Last updated:** [January 19, 2024, 9:53pm UTC](https://discuss.elastic.co/t/elastic-runtimes-fields/350677 "2024-01-19T21:53:50Z")

</div>

Hi, I try to make a dashboard with term agg (with three different values). But one of the values is too big, so it does not show it. This is the field value So I guess thats why it does not appears on my visuali…

---

## [Extracting time from @timestamp field using Runtime](https://discuss.elastic.co/t/extracting-time-from-timestamp-field-using-runtime/348468)

<div class="topic-metadata">

**Author:** [@Ethan777100](https://discuss.elastic.co/u/Ethan777100)\
**Replies:** 13\
**Last updated:** [December 4, 2023, 6:47am UTC](https://discuss.elastic.co/t/extracting-time-from-timestamp-field-using-runtime/348468 "2023-12-04T06:47:56Z")

</div>

I understand Scripted Fields have been deprecated since 7.13. The replacement is now Runtime. I have a @timestamp field How can I extract out the time component into a new field @timeofday - such that when I filter …

---

## [Elasticsearch Classic Plugin Development Documents](https://discuss.elastic.co/t/elasticsearch-classic-plugin-development-documents/347912)

<div class="topic-metadata">

**Author:** [@Zeus101](https://discuss.elastic.co/u/Zeus101)\
**Replies:** 0\
**Last updated:** [November 24, 2023, 9:17am UTC](https://discuss.elastic.co/t/elasticsearch-classic-plugin-development-documents/347912 "2023-11-24T09:17:57Z")

</div>

I have been trying to develop plugins for Elasticsearch, but was unable to as I couldn't find a proper documentation for the same. I have been using to cookiecutters' sample template to play around this but a proper docu…

---

## [Is it possible to create a aggregated runtime field and compare them?](https://discuss.elastic.co/t/is-it-possible-to-create-a-aggregated-runtime-field-and-compare-them/346205)

<div class="topic-metadata">

**Author:** [@turbo23](https://discuss.elastic.co/u/turbo23)\
**Replies:** 1\
**Last updated:** [November 1, 2023, 2:24pm UTC](https://discuss.elastic.co/t/is-it-possible-to-create-a-aggregated-runtime-field-and-compare-them/346205 "2023-11-01T14:24:21Z")

</div>

Hello, I want to create a dashboard that shows OK if my data\_stream distinct counted hostnames equals to my distinct counted hostnames in the cmdb index or shows NOK if it no longer equals both values. My idea: Compare…

---

## [Reference custom field in another custom field](https://discuss.elastic.co/t/reference-custom-field-in-another-custom-field/346066)

<div class="topic-metadata">

**Author:** [@patricio.devilla](https://discuss.elastic.co/u/patricio.devilla)\
**Replies:** 0\
**Last updated:** [October 30, 2023, 7:13pm UTC](https://discuss.elastic.co/t/reference-custom-field-in-another-custom-field/346066 "2023-10-30T19:13:27Z")

</div>

Is it possible to reference a custom field in another field? Creating custom field custom\_1 Creating custom field custom\_2 emit(doc\['custom\_1'\].value) I get the following error No field found for \[custom\_1\] in ma…

---

## [Run time fields in Kibana VIsualizations](https://discuss.elastic.co/t/run-time-fields-in-kibana-visualizations/343567)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 9\
**Last updated:** [October 5, 2023, 3:43pm UTC](https://discuss.elastic.co/t/run-time-fields-in-kibana-visualizations/343567 "2023-10-05T15:43:35Z")

</div>

Hello, I have a couple of run time fields defined in the index mappings which calculates the difference between two time stamps in days. It works fine, and I can see the data in Kibana discover. However, if I attempt t…

---

## [Unable to create Runtime field \[ conflict at fetch\]](https://discuss.elastic.co/t/unable-to-create-runtime-field-conflict-at-fetch/340686)

<div class="topic-metadata">

**Author:** [@shiktec](https://discuss.elastic.co/u/shiktec)\
**Replies:** 1\
**Last updated:** [August 14, 2023, 12:02pm UTC](https://discuss.elastic.co/t/unable-to-create-runtime-field-conflict-at-fetch/340686 "2023-08-14T12:02:10Z")

</div>

I am trying to set up Airflow observability via Statsd and Elastic. I wanted to create a runtime field. the Scripts checks out well , but when i try to save the runtime fields it shows below error the Entire conf…

---

## [Time difference between a field and current time](https://discuss.elastic.co/t/time-difference-between-a-field-and-current-time/339494)

<div class="topic-metadata">

**Author:** [@mathur7vidit](https://discuss.elastic.co/u/mathur7vidit)\
**Replies:** 2\
**Last updated:** [July 28, 2023, 8:37am UTC](https://discuss.elastic.co/t/time-difference-between-a-field-and-current-time/339494 "2023-07-28T08:37:49Z")

</div>

Hi Team, we have a field namely last\_modified\_date and we want to calculate aging time by noting the time difference between current time and last\_modified\_date. how can i achieve it via runtime field.

---

## [Call runtime field to another runtime field while creating](https://discuss.elastic.co/t/call-runtime-field-to-another-runtime-field-while-creating/337235)

<div class="topic-metadata">

**Author:** [@rubhamra](https://discuss.elastic.co/u/rubhamra)\
**Replies:** 1\
**Last updated:** [June 29, 2023, 10:11pm UTC](https://discuss.elastic.co/t/call-runtime-field-to-another-runtime-field-while-creating/337235 "2023-06-29T22:11:59Z")

</div>

I have question about runtime field, I want to call a runtime field to another runtime field. Suppose I have created a runtime field called (numberOfdays) which is calculating count of days between two dates. Now I ha…

---

## [Converting scripted field to runtime field](https://discuss.elastic.co/t/converting-scripted-field-to-runtime-field/335571)

<div class="topic-metadata">

**Author:** [@ccloutr.alex](https://discuss.elastic.co/u/ccloutr.alex)\
**Replies:** 2\
**Last updated:** [June 12, 2023, 6:33pm UTC](https://discuss.elastic.co/t/converting-scripted-field-to-runtime-field/335571 "2023-06-12T18:33:58Z")

</div>

Our stack was updated from version 7.9.3 to version 7.17.9 and I am having to convert some of the scripted fields to the new "runtime" field as it shows scripted fields as depreciated. It looks like some of the time func…
