Splunk Search

## How to convert milliseconds to minutes or seconds

Explorer
``````base search | spath "body.totalTime" | search "body.totalTime"=426287
``````

How to convert milliseconds to minutes or seconds?

Tags (3)
1 Solution
Esteemed Legend

Like this:

``````base search
| spath "body.totalTime"
| search "body.totalTime"=426287
| fieldformat "body.totalTime" = round(('body.totalTime' / 1000), 3)
``````
Esteemed Legend

Like this:

``````base search
| spath "body.totalTime"
| search "body.totalTime"=426287
| fieldformat "body.totalTime" = round(('body.totalTime' / 1000), 3)
``````
Champion

Hi

Try this

``````....| eval inSeconds = round('body.totalTime' / 1000,2)
| eval output = tostring(inSeconds, "duration")
``````
Esteemed Legend

Like this:

``````base search
| spath "body.totalTime"
| search "body.totalTime"=426287
| fieldformat "body.totalTime" = tostring('body.totalTime' / 1000, "duration")
``````
Explorer

@woodcock ck :Tried this one

base search | search "body.totalTime"=82534 | fieldformat "body.totalTime" = tostring('body.totalTime' / 1000, "duration") | table body.totalTime

Result I am getting like this 00:01:22.534000000000006 instead of 82.534 sec

Esteemed Legend

I was giving you what I thought was a "better" answer. See my new answer for the "exact" answer to what you asked.

Communicator

try this

```base search|spath "body.totalTime" | eval body.seconds=body.totalTime*1000 | eval body.minutes=body.seconds*60 |table body.totalTime, body.seconds, body.minutes```