<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to Round an eval average in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519196#M146201</link>
    <description>Time by time you must add ’ to surround &amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt; to get SPL to known that it’s a field like&lt;BR /&gt;| foreach * [ eval &amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt; = round(‘&amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt;’)]</description>
    <pubDate>Sat, 12 Sep 2020 08:30:23 GMT</pubDate>
    <dc:creator>isoutamo</dc:creator>
    <dc:date>2020-09-12T08:30:23Z</dc:date>
    <item>
      <title>How to Round an eval average</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519161#M146182</link>
      <description>&lt;P&gt;How do I round these numbers with this search?&lt;/P&gt;&lt;P&gt;index=net_auth_long&amp;nbsp;&lt;BR /&gt;| eval time_hour=strftime(_time,"%H")&lt;BR /&gt;| chart eval(count(channel)/7) AS field_div_by_7 by channel time_hour&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="tefa627_0-1599857872883.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/10783iA74897255391AC5A/image-size/medium?v=v2&amp;amp;px=400" role="button" title="tefa627_0-1599857872883.png" alt="tefa627_0-1599857872883.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 11 Sep 2020 20:58:57 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519161#M146182</guid>
      <dc:creator>tefa627</dc:creator>
      <dc:date>2020-09-11T20:58:57Z</dc:date>
    </item>
    <item>
      <title>Re: How to Round an eval average</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519163#M146184</link>
      <description>&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| chart eval(floor(count(channel)/7)) AS field_div_by_7 by channel time_hour&lt;/LI-CODE&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;or&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;LI-CODE lang="markup"&gt;| chart eval(round(count(channel)/7, 0)) AS field_div_by_7 by channel time_hour&lt;/LI-CODE&gt;&lt;P&gt;Sorry, bracket was in the wrong place - still not sure if it will work though&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 11 Sep 2020 22:08:04 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519163#M146184</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2020-09-11T22:08:04Z</dc:date>
    </item>
    <item>
      <title>Re: How to Round an eval average</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519166#M146186</link>
      <description>&lt;P&gt;Neither way worked..&lt;/P&gt;&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="tefa627_0-1599859283407.png" style="width: 400px;"&gt;&lt;img src="https://community.splunk.com/t5/image/serverpage/image-id/10784iED6BF8B76F394F4A/image-size/medium?v=v2&amp;amp;px=400" role="button" title="tefa627_0-1599859283407.png" alt="tefa627_0-1599859283407.png" /&gt;&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 11 Sep 2020 21:22:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519166#M146186</guid>
      <dc:creator>tefa627</dc:creator>
      <dc:date>2020-09-11T21:22:02Z</dc:date>
    </item>
    <item>
      <title>Re: How to Round an eval average</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519187#M146196</link>
      <description>&lt;P&gt;| foreach * [ eval &amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt; = round(&amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt;,0)]&lt;/P&gt;</description>
      <pubDate>Sat, 12 Sep 2020 04:55:59 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519187#M146196</guid>
      <dc:creator>thambisetty</dc:creator>
      <dc:date>2020-09-12T04:55:59Z</dc:date>
    </item>
    <item>
      <title>Re: How to Round an eval average</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519196#M146201</link>
      <description>Time by time you must add ’ to surround &amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt; to get SPL to known that it’s a field like&lt;BR /&gt;| foreach * [ eval &amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt; = round(‘&amp;lt;&amp;lt;FIELD&amp;gt;&amp;gt;’)]</description>
      <pubDate>Sat, 12 Sep 2020 08:30:23 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-Round-an-eval-average/m-p/519196#M146201</guid>
      <dc:creator>isoutamo</dc:creator>
      <dc:date>2020-09-12T08:30:23Z</dc:date>
    </item>
  </channel>
</rss>

