Integration Name

Logstash [logstash]

Dataset Name

No response

Integration Version

2.7.2

Agent Version

8.16.1

Agent Output Type

elasticsearch

Elasticsearch Version

8.18.1

OS Version and Architecture

Kubernetes - Ubuntu image

Software/API Version

No response

Error Message

No response

Event Original

No response

What did you do?

While using the dashboard some discrepancy was noted in the Time spent filtering per event panel of the Filter section of the Logstash Pipeline Details Overview Dashboard.

What did you see?

@DanielBrown2023 and myself noted that the number of milliseconds reported per event did not align with the expected value of dividing the total time by the total events. This is because the @timestamp field is collapsed by sum. So in essence we get the sum of the averages for each timestamp in the defined interval instead of the actual average. This works for the other fields in the table as we are summing the sums.

The same issue occurs in all of the tables that have Time Spent Per Event as the numbers displayed here are higher then the total amount of time per event seen in the other graphs.

What did you expect to see?

I expect the Time Spent Per Event values to be accurately displayed.

Anything else?

No response