- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Convert Avg_Session_Time from seconds to mm:ss

Vfinney
Observer
10-02-2020
11:03 AM
I need assistance with converting the Avg_Session_Time from seconds to minutes and seconds.
Here is my current search
index=kdol_7 sourcetype=ms:iis:auto dest_ip=10.140.14.228
| transaction CF_Connecting_IP
| stats avg(duration) AS Avg_Session_Time
The column labeled current is the current result. The column labeled desired is what I need assistance with. Thanks in advance.
Current | Desired |
Avg_Session_Time | Avg_Session_Time |
1045.2798365917713 | 17:41 |
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
10-02-2020
11:18 AM
The easiest way to do that is with the tostring() function.
| eval Avg_Session_Time=tostring(Avg_Session_Time, "duration")
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
