topic Converting default table numeric format to Italy ( convert .(dot) values to ,(comma) values in table rows) in Splunk Search

Converting default table numeric format to Italy ( convert .(dot) values to ,(comma) values in table rows)

balachandar — Tue, 19 Dec 2017 07:22:07 GMT

Hi,

My current requirement is showing the table values in Italy numeric format instead of default American format. I mean instead of dot(.) as decimal separator I have to replace it with comma(,) Example: 14.260410 should be shown as 14,260410

I have modified the default locale in i18n.py from en-US to it_IT and restarted splunk but it didn't help.

Any help would be appreciated.

Thanks
Bala

Re: Converting default table numeric format to Italy ( convert .(dot) values to ,(comma) values in table rows)

Elsurion — Tue, 19 Dec 2017 09:03:13 GMT

Hi Bala

I've done it with this way:

| eval usedkb=tostring(usedkb, "commas") 
| rex field=usedkb mode=sed "s/,/'/g"
| rex field=usedkb mode=sed "s/\./,/g"

First to eliminate the 1,000 comma to any other char and then replace the . to ,

Re: Converting default table numeric format to Italy ( convert .(dot) values to ,(comma) values in table rows)

mayurr98 — Tue, 19 Dec 2017 09:37:04 GMT

Try this:

| rex field=_raw mode=sed "s/\./,/"

And let know what output you get!
This will work only if 14.260410 comes at the start of the event.
If this is not working properly then give me a sample full event.