nevermind - the answer i am looking for is here: https://answers.splunk.com/answers/61652/convert-seconds-into-hours-minutes-and-seconds.html
yoursearchhere
| convert rmunit(secs) as numSecs
| eval stringSecs=tostring(numSecs,"duration")
| eval stringSecs = replace(stringSecs,"(\d+):(\d+):(\d+)","\1h \2min \3s")
... View more
Hey @MuS -
I am having a little trouble understanding your solution. I might just be missing something obvious though.
In your above solution, if duration is in seconds 532061.35 should correspond to roughly 147hours. (532061/3600)
When I use your code, I get a result of 22h:47min:41s:350ms
... View more