elastic / elastic/ecs

Event.duration is often inappropriate, missing http request+response+ ... durations

Open
#476 2 comments 4 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
1.1k
Forks
455
Avg merge
17h 8m
Merged PRs (30d)
5

Description

We have several use cases with http response time etc. We use event.duration here. But sometimes we need to store:
- time taken to send the http request
- time taken to receive the http response
- time taken by client to process the received html page
- total time

The total time here is mapped to event.duration, but there are no other fields. So I propose to add at least:
- http.request.duration (is usually event.duration now, but should be sum of all times in the event)
- http.response.duration

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.