# Format time field after xml plugin

**URL:** <https://discuss.elastic.co/t/format-time-field-after-xml-plugin/146413>\
**Category:** Logstash\
**Created:** [August 28, 2018, 7:20pm UTC](https://discuss.elastic.co/t/format-time-field-after-xml-plugin/146413 "2018-08-28T19:20:26Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![fionamacd](https://avatars.discourse-cdn.com/v4/letter/f/6a8cbe/32.png) [@fionamacd](https://discuss.elastic.co/u/fionamacd)\
**Post date:** [August 28, 2018, 7:20pm UTC](https://discuss.elastic.co/t/format-time-field-after-xml-plugin/146413/1 "2018-08-28T19:20:26Z")

</div>

Hi,  
I have the xml plugin running successfully on my data and can see our log files split out nicely in Kibana. What I need to do is convert a time field from this format:  
00:00:00.0312000  
Which I think is saying milliseconds, but I want to to be shown as seconds.  
This field is produced by the XML plugin - so it is called "xml\_content.Duration" - would it be accessible to logstash at this point? I tried to put a date filter after the xml filter but didn't see any difference.

Or is there a better place to do this conversion - Kibana scripted field maybe?  
We want to graph the duration as a dashboard because long durations would indicate trouble in the system!  
Thanks,  
Fiona

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 25, 2018, 7:20pm UTC](https://discuss.elastic.co/t/format-time-field-after-xml-plugin/146413/2 "2018-09-25T19:20:30Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.