I have a JSON object value as timetaken= 63542 in milliseconds, I need to convert the stats max(timetaken) value which is in ms to seconds tried as like below but it is not working out.
search envId = * message=PostLogin* | stats min(timetaken),max(timetaken), Avg(timetaken) | eval max_time=round((max(timetaken)/1000),2) , min_time = round((min(timetaken)/1000),2) | table max_time,min_time,Avg(timetaken)
But the above is producing the values in same ms even we convert it to seconds
Hi
You should assign values in stats to the new name like this
search envId = * message=PostLogin*
| stats min(timetaken) as minTimeTaken, max(timetaken) as maxTimeTaken, Avg(timetaken) as avgTimeTaken
| eval max_time=round(maxTimeTaken/1000,2) , min_time = round(minTimeTaken/1000,2)
| table max_time,min_time,avgTimeTakenOtherwise there could be some confusion on eval.
r. Ismo