topic Re: Milliseconds to HH:MM:SS in Splunk Search https://community.splunk.com/t5/Splunk-Search/Milliseconds-to-HH-MM-SS/m-p/99497#M182697 <P>Try</P> <PRE><CODE>... | eval inSec = inMs / 1000 | fieldformat inSec = tostring(inSec, "duration") </CODE></PRE> <P>where <CODE>inMs</CODE> is the name of your extracted field</P> Thu, 22 Mar 2012 19:44:52 GMT lguinn2 2012-03-22T19:44:52Z Milliseconds to HH:MM:SS https://community.splunk.com/t5/Splunk-Search/Milliseconds-to-HH-MM-SS/m-p/99496#M182696 <P>can anyone provide me with a way to have Splunk convert an extracted field which is currently in milliseconds to HH:MM:SS?</P> Thu, 22 Mar 2012 19:34:38 GMT https://community.splunk.com/t5/Splunk-Search/Milliseconds-to-HH-MM-SS/m-p/99496#M182696 tb5821 2012-03-22T19:34:38Z Re: Milliseconds to HH:MM:SS https://community.splunk.com/t5/Splunk-Search/Milliseconds-to-HH-MM-SS/m-p/99497#M182697 <P>Try</P> <PRE><CODE>... | eval inSec = inMs / 1000 | fieldformat inSec = tostring(inSec, "duration") </CODE></PRE> <P>where <CODE>inMs</CODE> is the name of your extracted field</P> Thu, 22 Mar 2012 19:44:52 GMT https://community.splunk.com/t5/Splunk-Search/Milliseconds-to-HH-MM-SS/m-p/99497#M182697 lguinn2 2012-03-22T19:44:52Z