default transaction duration time unit

[c0mrade]

What is the default duration time unit for splunk? is it seconds?

[sdaniels · Accepted solution]

Yes, the duration is measured in seconds. I don't believe there is a parameter to change the default but you could certainly convert the duration from seconds into something else using the eval command.

[c0mrade]

@sdaniels kewl thanks, than obviously my transaction query is wrong. thanks again. good intel

[JFin]

How do I explain a transaction duration of 91 when the event time stamps range over only 3 seconds?