# event.duration incorrect value in elastick

**URL:** <https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200>\
**Category:** Kibana\
**Created:** [April 16, 2025, 1:42pm UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200 "2025-04-16T13:42:13Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![yanshin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yanshin/32/142662_2.png) [@yanshin](https://discuss.elastic.co/u/yanshin)\
**Post date:** [April 16, 2025, 1:42pm UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200/1 "2025-04-16T13:42:13Z")

</div>

Hello!  
can you help me solve the problem?  
there are PG SQL logs in elastica.  
there is an event.duration field that displays an incorrect value.for example, in the postgresql logs duration: 818.585 ms  
in elastic

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/7/3/73b857b9310081a438d27468446baa0dd712f269.png)  
the log provider is filebeat - I uploaded the logs to a file, there is no error.  
The Numeric variable type is long in the index template.

---

<div class="post-metadata">

**Author:** ![Musab\_Dogan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/musab_dogan/32/70691_2.png) [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\
**Post date:** [April 16, 2025, 2:27pm UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200/2 "2025-04-16T14:27:43Z")

</div>

Update the `field.format` in `kibana => data view => index pattern => field_name`. Save it and send another screenshot and let me check for you.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/0/3/030353a7243fab14a7e4ca9c56b0263e9238d900.jpeg)

---

<div class="post-metadata">

**Author:** ![yanshin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yanshin/32/142662_2.png) [@yanshin](https://discuss.elastic.co/u/yanshin)\
**Post date:** [April 16, 2025, 2:49pm UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200/3 "2025-04-16T14:49:03Z")

</div>

![изображение](https://us1.discourse-cdn.com/elastic/original/3X/a/d/adc9bf5879abef8410df5de5fb100509214288cf.png)  
interesting result

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [April 16, 2025, 3:14pm UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200/4 "2025-04-16T15:14:07Z")

</div>

@yanshin

Can a little tricky there I suspect that value is actually Microseconds or perhaps even nanoseconds

if you are saying that 818585024 is supposed to be 818 ms then that then the value is actually nanosecods

 ![Screenshot 2025-04-16 at 8.15.55 AM](https://us1.discourse-cdn.com/elastic/original/3X/3/8/3878ce0c6b5d6817d4083a73a8b5809992859ad7.png)

If microseconds

 ![Screenshot 2025-04-16 at 8.12.43 AM](https://us1.discourse-cdn.com/elastic/original/3X/e/2/e253ad0c85f450a2fa1b47ab546622635163282b.png)

---

<div class="post-metadata">

**Author:** ![yanshin](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/yanshin/32/142662_2.png) [@yanshin](https://discuss.elastic.co/u/yanshin)\
**Post date:** [April 22, 2025, 6:55am UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200/5 "2025-04-22T06:55:50Z")

</div>

@stephenb @Musab_Dogan  
Thank you for your help! 😀

 ![Снимок экрана 2025-04-22 094051](https://us1.discourse-cdn.com/elastic/original/3X/f/d/fda98d053a787e910037c848405d9f5f5478976c.png)

---

<div class="post-metadata">

**Author:** ![Musab\_Dogan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/musab_dogan/32/70691_2.png) [@Musab\_Dogan](https://discuss.elastic.co/u/Musab_Dogan)\
**Post date:** [April 22, 2025, 8:40am UTC](https://discuss.elastic.co/t/event-duration-incorrect-value-in-elastick/377200/6 "2025-04-22T08:40:20Z")

</div>

You're welcome. Happy to hear it worked!
