# ElasticSearch IIS time-taken Field is Missing

**URL:** <https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118>\
**Category:** Elastic Agent\
**Created:** [August 29, 2022, 4:01am UTC](https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118 "2022-08-29T04:01:52Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![eagles40cnuh](https://avatars.discourse-cdn.com/v4/letter/e/edb3f5/32.png) [@eagles40cnuh](https://discuss.elastic.co/u/eagles40cnuh)\
**Post date:** [August 29, 2022, 4:01am UTC](https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118/1 "2022-08-29T04:01:52Z")

</div>

My ELK Version 8.3 (Elasticsearch, Kibana, ElasticAgent, Beats....)

1. ElasticAgent installed my Server Host (Complete)

2. ALL IIS LogField Enabled

3. Data collection was successful

4. But.... Just 1 Field(Time-Taken) does not exist Discovery. Here is My LogData Sample  
(Event.Duration Field is not exist)

5. Therefore..... Using FileBeat -\> IIS Module Enabled -\> time-taken(duration) log Collect Success

ElasticAgent Is this impossible?

---

<div class="post-metadata">

**Author:** ![Kike1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kike1/32/100884_2.png) [@Kike1](https://discuss.elastic.co/u/Kike1)\
**Post date:** [September 8, 2022, 10:31am UTC](https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118/2 "2022-09-08T10:31:01Z")

</div>

Same problem.

---

<div class="post-metadata">

**Author:** ![Kike1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kike1/32/100884_2.png) [@Kike1](https://discuss.elastic.co/u/Kike1)\
**Post date:** [September 8, 2022, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118/3 "2022-09-08T10:50:58Z")

</div>

Just from update to Integration IIS Version 1.0.0.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 6, 2022, 10:51am UTC](https://discuss.elastic.co/t/elasticsearch-iis-time-taken-field-is-missing/313118/4 "2022-10-06T10:51:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
