Back to Beats

Decode duration [decode-duration]

docs/reference/auditbeat/decode-duration.md

9.4.0619 B
Original Source

Decode duration [decode-duration]

The decode_duration processor decodes a Go-style duration string into a specific format.

For more information about the Go time.Duration string style, refer to the Go documentation.

NameRequiredDefaultDescription
fieldyesWhich field of event needs to be decoded as time.Duration
formatyesmillisecondsSupported formats: milliseconds/seconds/minutes/hours
yaml
processors:
  - decode_duration:
      field: "app.rpc.cost"
      format: "milliseconds"