eval calculation

sahana — Wed, 17 Nov 2021 08:04:35 GMT

I have a JSON object value as timetaken= 63542 in milliseconds, I need to convert the stats max(timetaken) value which is in ms to seconds tried as like below but it is not working out.

search envId = * message=PostLogin* | stats min(timetaken),max(timetaken), Avg(timetaken) | eval max_time=round((max(timetaken)/1000),2) , min_time = round((min(timetaken)/1000),2) | table max_time,min_time,Avg(timetaken)

But the above is producing the values in same ms even we convert it to seconds

Re: eval calculation

isoutamo — Wed, 17 Nov 2021 08:28:40 GMT

You should assign values in stats to the new name like this

search envId = * message=PostLogin* | stats min(timetaken) as minTimeTaken, max(timetaken) as maxTimeTaken, Avg(timetaken) as avgTimeTaken | eval max_time=round(maxTimeTaken/1000,2) , min_time = round(minTimeTaken/1000,2) | table max_time,min_time,avgTimeTaken

Otherwise there could be some confusion on eval.

r. Ismo

topic eval calculation in Dashboards & Visualizations

eval calculation

Re: eval calculation