Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Splunk Search
×
Are you a member of the Splunk Community?
Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- Find Answers
- :
- Using Splunk
- :
- Splunk Search
- :
- Re: How to convert milliseconds to minutes or seco...
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
monipinni
Explorer
11-21-2019
08:25 AM
base search | spath "body.totalTime" | search "body.totalTime"=426287
How to convert milliseconds to minutes or seconds?
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
woodcock
Esteemed Legend
11-25-2019
07:05 AM
Like this:
base search
| spath "body.totalTime"
| search "body.totalTime"=426287
| fieldformat "body.totalTime" = round(('body.totalTime' / 1000), 3)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
woodcock
Esteemed Legend
11-25-2019
07:05 AM
Like this:
base search
| spath "body.totalTime"
| search "body.totalTime"=426287
| fieldformat "body.totalTime" = round(('body.totalTime' / 1000), 3)
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
vnravikumar
Champion
11-21-2019
07:43 PM
Hi
Try this
....| eval inSeconds = round('body.totalTime' / 1000,2)
| eval output = tostring(inSeconds, "duration")
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
woodcock
Esteemed Legend
11-21-2019
02:37 PM
Like this:
base search
| spath "body.totalTime"
| search "body.totalTime"=426287
| fieldformat "body.totalTime" = tostring('body.totalTime' / 1000, "duration")
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
monipinni
Explorer
11-24-2019
06:37 PM
@woodcock ck :Tried this one
base search | search "body.totalTime"=82534 | fieldformat "body.totalTime" = tostring('body.totalTime' / 1000, "duration") | table body.totalTime
Result I am getting like this 00:01:22.534000000000006 instead of 82.534 sec
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
woodcock
Esteemed Legend
11-25-2019
07:05 AM
I was giving you what I thought was a "better" answer. See my new answer for the "exact" answer to what you asked.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Anantha123
Communicator
11-21-2019
09:16 AM
try this
base search|spath "body.totalTime" | eval body.seconds=body.totalTime*1000 | eval body.minutes=body.seconds*60
|table body.totalTime, body.seconds, body.minutes
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!
Tech Talk Recap | Mastering Threat Hunting
Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...
Observability for AI Applications: Troubleshooting Latency
If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...
Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?
In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...
