https://community.splunk.com/t5/Splunk-Search/How-to-use-IF-and-ROUND-together/m-p/740813#M240487 <P>Try something like this</P><LI-CODE lang="markup">| eval resp_bytes=if(resp_bytes=0, "0B",if(resp_bytes&lt;1000000,round(resp_bytes/1024,2) . "KB",if(resp_bytes&gt;1000000,round(resp_bytes/1024/1024,2) . "MB", null))) </LI-CODE> Tue, 04 Mar 2025 18:02:30 GMT ITWhisperer 2025-03-04T18:02:30Z https://community.splunk.com/t5/Splunk-Search/How-to-use-IF-and-ROUND-together/m-p/740811#M240486 <P>Hello,</P><P>I am trying to write a search query for responding byte sizes that is a catch all. Currently I have:</P><P>index=index&nbsp; 8.8.8.8<BR /><SPAN>| stats sum(resp_bytes) as resp_bytes<BR />| eval resp_bytes=if(resp_bytes=0, "0B",if(resp_bytes&lt;1000000,resp_bytes/1024 . "KB",if(resp_bytes&gt;1000000,resp_bytes/1024/1024 . "MB", null)))&nbsp;</SPAN></P><P>I have tested this and it works, but now i am trying to add in a "round" to the 2nd decimal spot. and Im not sure where it would go.&nbsp;&nbsp;</P> Tue, 04 Mar 2025 17:54:23 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-IF-and-ROUND-together/m-p/740811#M240486 ajmach343 2025-03-04T17:54:23Z https://community.splunk.com/t5/Splunk-Search/How-to-use-IF-and-ROUND-together/m-p/740813#M240487 <P>Try something like this</P><LI-CODE lang="markup">| eval resp_bytes=if(resp_bytes=0, "0B",if(resp_bytes&lt;1000000,round(resp_bytes/1024,2) . "KB",if(resp_bytes&gt;1000000,round(resp_bytes/1024/1024,2) . "MB", null))) </LI-CODE> Tue, 04 Mar 2025 18:02:30 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-IF-and-ROUND-together/m-p/740813#M240487 ITWhisperer 2025-03-04T18:02:30Z https://community.splunk.com/t5/Splunk-Search/How-to-use-IF-and-ROUND-together/m-p/740814#M240488 <P>that worked thank you!</P> Tue, 04 Mar 2025 18:07:24 GMT https://community.splunk.com/t5/Splunk-Search/How-to-use-IF-and-ROUND-together/m-p/740814#M240488 ajmach343 2025-03-04T18:07:24Z