Dashboards & Visualizations

Is the Splunk Stream Dashboard time_taken calculation correct?

kmower
Communicator

I was looking at the standard dashboards in the Splunk Stream App - for example for top 10 Longest Running Queries for Database. My question is that my understanding is that time_taken is in Milliseconds, but the dashboard uses eval(time_taken/1000000) which makes those time_taken(s) look a lot shorter in terms of time. So, my question is if I am missing something, or are those time_taken evals actually wrong for calculating seconds from milliseconds (which my little brain seems to think)? Thanks.

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to January Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...

[Puzzles] Solve, Learn, Repeat: Reprocessing XML into Fixed-Length Events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...