# IIS - Taken time - event.duration?

**URL:** <https://discuss.elastic.co/t/iis-taken-time-event-duration/301546>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 4, 2022, 5:56pm UTC](https://discuss.elastic.co/t/iis-taken-time-event-duration/301546 "2022-04-04T17:56:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mgfeal](https://avatars.discourse-cdn.com/v4/letter/m/8e7dd6/32.png) [@mgfeal](https://discuss.elastic.co/u/mgfeal)\
**Post date:** [April 4, 2022, 5:56pm UTC](https://discuss.elastic.co/t/iis-taken-time-event-duration/301546/1 "2022-04-04T17:56:02Z")

</div>

Hi,

I was reading this topic:

> [@Reason for Scale 1000000 for IIS event.duration](https://discuss.elastic.co/t/reason-for-scale-1000000-for-iis-event-duration/273762):
>
> I'm trying to figure out what is the reason for the scale of 1000000 when using the filebeat module for iis for the duration field. Seems a bit strange when trying to build a dashboard for Reponse Times where every value is multiplicated by 1000000.

And we also use to put in our dashboards the "Taken Time" from IIS. So, is correct that event.duration is the value for taken time? If it's not correct, how can we use it?

Thanks!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 2, 2022, 7:56pm UTC](https://discuss.elastic.co/t/iis-taken-time-event-duration/301546/2 "2022-05-02T19:56:34Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.