Reporting

Convert Avg_Session_Time from seconds to mm:ss

Vfinney
Observer

I need assistance with converting the Avg_Session_Time from seconds to minutes and seconds.

Here is my current search

index=kdol_7 sourcetype=ms:iis:auto dest_ip=10.140.14.228
| transaction CF_Connecting_IP
| stats avg(duration) AS Avg_Session_Time

The column labeled current is the current result.  The column labeled desired is what I need assistance with.  Thanks in advance.   

CurrentDesired
Avg_Session_TimeAvg_Session_Time
1045.279836591771317:41
Labels (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The easiest way to do that is with the tostring() function.

| eval Avg_Session_Time=tostring(Avg_Session_Time, "duration")

 

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials

Welcome to the "Splunk Classroom Chronicles" series, created to help curious, career-minded learners get ...

Access Tokens Page - New & Improved

Splunk Observability Cloud recently launched an improved design for the access tokens page for better ...

Stay Connected: Your Guide to November Tech Talks, Office Hours, and Webinars!

🍂 Fall into November with a fresh lineup of Community Office Hours, Tech Talks, and Webinars we’ve ...