Session Duration in minutes

[JoeSco27]

I have a search that returns the "Avg Session Duration" by USER_ID. The results are coming back in minutes as long as the time being returned is less then 60 minutes. My problem is that when the "Avg Session Duration" goes over 1 hour the minutes no longer return properly.

This is my format, at the end of my search string, to have the response time come back in minutes.

< mysearch > | fieldformat "Avg Session Duration(minutes)"=strftime('Avg Session Duration(minutes)', "%M:%S")

I have tried to add %H and make the time format "%H:%M:%S" but the "Avg Session Duration" is still being returned wrong. Is there a way to return the "Avg Session Duration" in an hour, min, second format?

[Gilberto_Castil · Accepted solution]

This will likely do what you are looking for:

rename "Avg Session Duration(minutes)" AS avgSessionDuration 
| fieldformat avgSessionDuration=tostring(avgSessionDuration,"duration") 

This has also been hacked in the past to make even prettier:

rename "Avg Session Duration(minutes)" AS avgSessionDuration 
| eval pretty_AvgSessionDuration = floor(avgSessionDuration/60)." Hours ".floor(floor(avgSessionDuration - (avgSessionDuration/60))/60)." Min"

[JoeSco27]

Thank you, this works perfectly

[reneedeleon]

What if you wanted to add days?

[cramasta]

please provide example of how the minute field in the events look before 1 minute and after 1 minute