Change ECS event.duration unit to milliseconds in Packetbeat


I have a requirement to capture http average event duration in milliseconds and show it in a visualisation.

As of now ECS event.duration captures duration in nanoseconds. Which is not very readable in a visualisation.
Is there any processor to modify it to milliseconds ?
For ex,
If event.duration = 800,000,000 ns
I would like to convert it to 800,000,000 / 100,000 = 800 ms.

Priyesh Mishra

The first thing I would recommend looking into, is adjusting your index pattern's format for the event.duration field. Look at the "Duration" formatter here:

1 Like

Thanks @webmat,
That's exactly what I was looking for.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.