Convert EPOCH time to Elapsed Time

Hi Team,

I have an application which outputs the below data in csv format. The timeStamp format is the EPOCH time. We want this to be shown as Elapsed Timei in Kibana. (Example Below)

Actual Output from the Application -

timeStamp,responseTime,label,responseCode,responseMessage
1527780436049,1935,Launch,200,Success
1527780436674,1364,SignIn,200,Success
1527780436361,1675,View,200,Success
1527780436955,1148,Logout,200,Success

How we want it to send it/show it -

timeStamp,responseTime,label,responseCode,responseMessage
00:00:02,1935,Launch,200,Success
00:00:05,1364,SignIn,200,Success
00:00:07,1675,View,200,Success
00:00:10,1148,Logout,200,Success

We want to show the timestamp as elapsed time in the graphs. Right now what I've done is, converted this EPOCH time to UTC time using the below code and sending it. The graph also shows data using the UTC time only. But our target is to show in the elapsed time format as mentioned.

date {
timezone => "UTC"
match => ["timeStamp", "UNIX_MS" ]
target => "timeStamp"
}

Is it possible to convert this time into the time i want and visualize accordingly. Kindly clarify.

Thanks.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.