I need assistance with converting the Avg_Session_Time from seconds to minutes and seconds.
Here is my current search
index=kdol_7 sourcetype=ms:iis:auto dest_ip=10.140.14.228
| transaction CF_Connecting_IP
| stats avg(duration) AS Avg_Session_Time
The column labeled current is the current result. The column labeled desired is what I need assistance with. Thanks in advance.
Current | Desired |
Avg_Session_Time | Avg_Session_Time |
1045.2798365917713 | 17:41 |
The easiest way to do that is with the tostring() function.
| eval Avg_Session_Time=tostring(Avg_Session_Time, "duration")