Change ECS event.duration unit to milliseconds in Packetbeat

Elastic Stack Beats
,
1

Hi,

I have a requirement to capture http average event duration in milliseconds and show it in a visualisation.

As of now ECS event.duration captures duration in nanoseconds. Which is not very readable in a visualisation.
Is there any processor to modify it to milliseconds ?
For ex,
If event.duration = 800,000,000 ns
I would like to convert it to 800,000,000 / 100,000 = 800 ms.

Thanks,
Priyesh Mishra

2

The first thing I would recommend looking into, is adjusting your index pattern's format for the event.duration field. Look at the "Duration" formatter here:

https://www.elastic.co/guide/en/kibana/current/field-formatters-numeric.html

1 Like
3

Thanks @webmat,
That's exactly what I was looking for.

1 Like
4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.