You're talking about a time interval in seconds that needs to be converted into readable format? Try this:
... | eval readable = tostring(interval_in_seconds, "duration")
For your example that will set readable
to "98+07:09:23"
You're talking about a time interval in seconds that needs to be converted into readable format? Try this:
... | eval readable = tostring(interval_in_seconds, "duration")
For your example that will set readable
to "98+07:09:23"
ah, of course. thanks!