<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Take the absolute value and show  the original number in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Take-the-absolute-value-and-show-the-original-number/m-p/79357#M4322</link>
    <description>&lt;P&gt;I want to use [rangemap] to display these numbers.
But not all of these numbers are positive integer.
So I have to take the absolute value.
The question is how could I show the original number in rangemap?&lt;/P&gt;

&lt;P&gt;example:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;...|eval abs(num1) as use_num1 |rangemap field=use_num1 low=0-500 elevated=501-800 severe=801-10000000000

&amp;lt;module name="SingleValue"&amp;gt;
    &amp;lt;param name="field"&amp;gt;use_num1&amp;lt;/param&amp;gt;
    &amp;lt;param name="classField"&amp;gt;range&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;How could I show the original number in the SingleValue?&lt;/P&gt;

&lt;P&gt;My English is poor.I hope you can understand what i mean. =)
Thanks a lot.&lt;/P&gt;</description>
    <pubDate>Thu, 28 Oct 2010 12:56:12 GMT</pubDate>
    <dc:creator>flora123</dc:creator>
    <dc:date>2010-10-28T12:56:12Z</dc:date>
    <item>
      <title>Take the absolute value and show  the original number</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Take-the-absolute-value-and-show-the-original-number/m-p/79357#M4322</link>
      <description>&lt;P&gt;I want to use [rangemap] to display these numbers.
But not all of these numbers are positive integer.
So I have to take the absolute value.
The question is how could I show the original number in rangemap?&lt;/P&gt;

&lt;P&gt;example:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;...|eval abs(num1) as use_num1 |rangemap field=use_num1 low=0-500 elevated=501-800 severe=801-10000000000

&amp;lt;module name="SingleValue"&amp;gt;
    &amp;lt;param name="field"&amp;gt;use_num1&amp;lt;/param&amp;gt;
    &amp;lt;param name="classField"&amp;gt;range&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;How could I show the original number in the SingleValue?&lt;/P&gt;

&lt;P&gt;My English is poor.I hope you can understand what i mean. =)
Thanks a lot.&lt;/P&gt;</description>
      <pubDate>Thu, 28 Oct 2010 12:56:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Take-the-absolute-value-and-show-the-original-number/m-p/79357#M4322</guid>
      <dc:creator>flora123</dc:creator>
      <dc:date>2010-10-28T12:56:12Z</dc:date>
    </item>
    <item>
      <title>Re: Take the absolute value and show  the original number</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Take-the-absolute-value-and-show-the-original-number/m-p/79358#M4323</link>
      <description>&lt;P&gt;The eval expession should look like:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;..|eval use_num1=abs(num1) | ...
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;and to show the original number, you just have to use in the field option of the SingleValue module:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;  &amp;lt;module name="SingleValue"&amp;gt;
    &amp;lt;param name="field"&amp;gt;num1&amp;lt;/param&amp;gt;
    &amp;lt;param name="classField"&amp;gt;range&amp;lt;/param&amp;gt;
  &amp;lt;/module&amp;gt;
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Thu, 28 Oct 2010 14:07:12 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Take-the-absolute-value-and-show-the-original-number/m-p/79358#M4323</guid>
      <dc:creator>ziegfried</dc:creator>
      <dc:date>2010-10-28T14:07:12Z</dc:date>
    </item>
    <item>
      <title>Re: Take the absolute value and show  the original number</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Take-the-absolute-value-and-show-the-original-number/m-p/79359#M4324</link>
      <description>&lt;P&gt;Great!Thank you very much!So it's that simple. &lt;span class="lia-unicode-emoji" title=":grinning_face_with_big_eyes:"&gt;😃&lt;/span&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 28 Oct 2010 15:04:31 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Take-the-absolute-value-and-show-the-original-number/m-p/79359#M4324</guid>
      <dc:creator>flora123</dc:creator>
      <dc:date>2010-10-28T15:04:31Z</dc:date>
    </item>
  </channel>
</rss>

