Reporting

Convert Avg_Session_Time from seconds to mm:ss

Vfinney
Observer

I need assistance with converting the Avg_Session_Time from seconds to minutes and seconds.

Here is my current search

index=kdol_7 sourcetype=ms:iis:auto dest_ip=10.140.14.228
| transaction CF_Connecting_IP
| stats avg(duration) AS Avg_Session_Time

The column labeled current is the current result.  The column labeled desired is what I need assistance with.  Thanks in advance.   

CurrentDesired
Avg_Session_TimeAvg_Session_Time
1045.279836591771317:41
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The easiest way to do that is with the tostring() function.

| eval Avg_Session_Time=tostring(Avg_Session_Time, "duration")

 

---
If this reply helps you, an upvote would be appreciated.
0 Karma
Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.