Change ECS event.duration unit to milliseconds in Packetbeat

[pryesh001 (Priyesh Mishra)]

Hi,

I have a requirement to capture http average event duration in milliseconds and show it in a visualisation.

As of now ECS event.duration captures duration in nanoseconds. Which is not very readable in a visualisation.
Is there any processor to modify it to milliseconds ?
For ex,
If event.duration = 800,000,000 ns
I would like to convert it to 800,000,000 / 100,000 = 800 ms.

Thanks,
Priyesh Mishra

[webmat (Mathieu Martin)]

The first thing I would recommend looking into, is adjusting your index pattern's format for the event.duration field. Look at the "Duration" formatter here:

https://www.elastic.co/guide/en/kibana/current/field-formatters-numeric.html

[pryesh001 (Priyesh Mishra)]

Thanks @webmat,
That's exactly what I was looking for.