# Events received Rate expression using metricbeat on Timelion
**URL:** https://discuss.elastic.co/t/events-received-rate-expression-using-metricbeat-on-timelion/247822
**Category:** Kibana
**Tags:** timelion
**Created:** [September 8, 2020, 6:09am UTC](https://discuss.elastic.co/t/events-received-rate-expression-using-metricbeat-on-timelion/247822 "2020-09-08T06:09:23Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@8wlgns](https://discuss.elastic.co/u/8wlgns)
#### Post date: [September 8, 2020, 6:09am UTC](https://discuss.elastic.co/t/events-received-rate-expression-using-metricbeat-on-timelion/247822/1 "2020-09-08T06:09:24Z")
Hello?
I wanna draw Events received Rates per second on Kibana timelion using metricbeat 🙂
Is this right expressions for this purpose?
```auto
.es(
index=test-monitoring*,
timefield='@timestamp',
q='event.module:kafka AND _exists_:kafka.partition.offset.newest',
metric='avg:event.duration').multiply(0.000000001).label('Duration(sec) of Newest Events')
```
I'm curious about the common field event.duration of metricbeat.
Is this duration of events received on kafka(or each modules) or metricbeat side ?
---
### Author:  [@wylie](https://discuss.elastic.co/u/wylie)
#### Post date: [September 10, 2020, 10:37pm UTC](https://discuss.elastic.co/t/events-received-rate-expression-using-metricbeat-on-timelion/247822/2 "2020-09-10T22:37:05Z")
It's ambiguous in the documentation: [https://www.elastic.co/guide/en/beats/metricbeat/current/exported-fields-ecs.html#\_event\_3](https://www.elastic.co/guide/en/beats/metricbeat/current/exported-fields-ecs.html#_event_3)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 8, 2020, 10:37pm UTC](https://discuss.elastic.co/t/events-received-rate-expression-using-metricbeat-on-timelion/247822/3 "2020-10-08T22:37:13Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.