« Decode CSV fields Decode JSON fields »
Elastic Docs ›Fleet and Elastic Agent Guide [8.19] ›Define processors

Decode duration

edit
IMPORTANT: This documentation is no longer updated. Refer to Elastic's version policy and the latest documentation.

Decode duration

edit

The decode_duration processor decodes a Go-style duration string into a specific format.

For more information about the Go time.Duration string style, refer to the Go documentation.

Example

edit
processors:
  - decode_duration:
      field: "app.rpc.cost"
      format: "milliseconds"

Configuration settings

edit
Name Required Default Description

field

yes

Which field of event needs to be decoded as time.Duration

format

yes

milliseconds

Supported formats: milliseconds/seconds/minutes/hours

« Decode CSV fields Decode JSON fields »