https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436702#M124435 <P>perfect thanks</P> Mon, 11 Mar 2019 12:21:17 GMT jip31 2019-03-11T12:21:17Z https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436698#M124431 <P>Hello<BR /> I use the eval below in order to calculate a percentage</P> <PRE><CODE>| eval Trend_Proc_time=round(100-(Proc_dest*100)/(Proc_source),1)." %" </CODE></PRE> <P>When Proc_dest is &gt; to Proc_source I have a result with minus - perfect<BR /> But when Proc_dest is &lt; to Proc_source, I need to have a + sign before the result<BR /> could you help me to do this please?</P> Tue, 29 Sep 2020 23:40:33 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436698#M124431 jip31 2020-09-29T23:40:33Z https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436699#M124432 <P>Hi</P> <P>Try like</P> <PRE><CODE>your query| eval Trend_Proc_time=round(100-(Proc_dest*100)/(Proc_source),1) | eval Trend_Proc_time=if(Trend_Proc_time&gt;0,"+".Trend_Proc_time." %",Trend_Proc_time." %") </CODE></PRE> Mon, 11 Mar 2019 11:21:09 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436699#M124432 vnravikumar 2019-03-11T11:21:09Z https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436700#M124433 <P>Hi. <BR /> Using regex/sed you could try this</P> <PRE><CODE>...| eval Trend_Proc_time=round(100-(Proc_dest*100)/(Proc_source),1)." %" |rex mode=sed field=Trend_Proc_time "s/^(\d+)/+\1/" </CODE></PRE> Mon, 11 Mar 2019 11:34:31 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436700#M124433 nickhills 2019-03-11T11:34:31Z https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436701#M124434 <P>sorry it doesnt works</P> Mon, 11 Mar 2019 12:21:06 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436701#M124434 jip31 2019-03-11T12:21:06Z https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436702#M124435 <P>perfect thanks</P> Mon, 11 Mar 2019 12:21:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-plus-sign-before-a-result-to-calculate-percentage/m-p/436702#M124435 jip31 2019-03-11T12:21:17Z