# Query regarding Synthetics Monitor in Kibana

**URL:** https://discuss.elastic.co/t/query-regarding-synthetics-monitor-in-kibana/380565
**Category:** Synthetics
**Created:** [July 30, 2025, 5:07am UTC](https://discuss.elastic.co/t/query-regarding-synthetics-monitor-in-kibana/380565 "2025-07-30T05:07:30Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)
#### Post date: [July 30, 2025, 5:07am UTC](https://discuss.elastic.co/t/query-regarding-synthetics-monitor-in-kibana/380565/1 "2025-07-30T05:07:30Z")

</div>

Hello Team :

Say we create Synthetics monitoring using "HTTP Ping" with below parameters

```auto
URL
Monitor name
Locations
Frequency

```

Now the Synthetic monitoring is working for Monitor name : ABC

If I drill down to monitor we see below table :

`@timestamp | Result | IP | Message | Duration`

**My Query :**

Is the duration shared equivalent to response time as if I want to calculate via the values in index for watcher or any rule it does not match :

```auto
"http.rtt.validate.us": [38061] => 38.06ms
"http.rtt.content.us": [13535] => 13.54ms
"http.rtt.write_request.us": [560] => 0.56ms
"http.rtt.total.us": [65750] => 65.75ms
"http.rtt.response_header.us": [24525] => 24.53ms

In Synthetics view duration is => 76ms for above record.

```

So in this case how to calculate the response time of URL from the values available in the index, should i consider the value as [http.rtt.total.us](http://http.rtt.total.us) =\> 65.75ms?

Thanks!!

---

<div class="post-metadata">

### Author: ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)
#### Post date: [August 4, 2025, 11:58am UTC](https://discuss.elastic.co/t/query-regarding-synthetics-monitor-in-kibana/380565/2 "2025-08-04T11:58:41Z")

</div>

Hello,

Could anyone please guide regarding above query?

Thanks!!

---

<div class="post-metadata">

### Author: ![emilioalvap](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emilioalvap/32/99310_2.png) [@emilioalvap](https://discuss.elastic.co/u/emilioalvap)
#### Post date: [August 4, 2025, 3:11pm UTC](https://discuss.elastic.co/t/query-regarding-synthetics-monitor-in-kibana/380565/3 "2025-08-04T15:11:45Z")

</div>

Hi @Tortoise,

`http.rtt.total.us` is the closest value there is for a pure HTTP RTT provided by heartbeat. But it also includes the response validation execution time (if there's any.  
Some of these metrics are not exclusive, so total RTT cannot be derived by simply adding all of them:

```auto
"write_request": look.RTT(writeEnd.Sub(writeStart)),
"response_header": look.RTT(readStart.Sub(writeStart)),
...
event.PutValue("http.rtt.validate", look.RTT(end.Sub(writeStart)))
event.PutValue("http.rtt.content", look.RTT(end.Sub(readStart)))

```

Hope that helps!

---

<div class="post-metadata">

### Author: ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)
#### Post date: [August 4, 2025, 3:21pm UTC](https://discuss.elastic.co/t/query-regarding-synthetics-monitor-in-kibana/380565/4 "2025-08-04T15:21:08Z")

</div>

Thank you @emilioalvap for your input. This will definitely help.