IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Decode CSV fields Decode JSON fields »
Elastic Docs ›Filebeat Reference [8.14] ›Configure Filebeat ›Filter and enhance data with processors

Decode duration

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Decode duration

edit

The decode_duration processor decodes a Go-style duration string into a specific format.

For more information about the Go time.Duration string style, refer to the Go documentation.

Table 2. Decode-Duration options

Name Required Default Description

field

yes

Which field of event needs to be decoded as time.Duration

format

yes

milliseconds

Supported formats: milliseconds/seconds/minutes/hours

 

processors:
  - decode_duration:
      field: "app.rpc.cost"
      format: "milliseconds"
« Decode CSV fields Decode JSON fields »