https://community.splunk.com/t5/Splunk-Search/Nesting-a-round-function/m-p/140700#M38894 <P>You can do the rounding straight away without additional piping, like this:</P> <PRE><CODE>... | chart eval(round(avg(TheCost),2)) by ProductSku Month </CODE></PRE> <P>For doing more complicated things to fields with dynamic names and numbers, take a look at the <CODE>foreach</CODE> command: <A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/foreach">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/foreach</A></P> Thu, 06 Feb 2014 20:19:35 GMT martin_mueller 2014-02-06T20:19:35Z https://community.splunk.com/t5/Splunk-Search/Nesting-a-round-function/m-p/140699#M38893 <P>Say I want to calculate the average cost of spending on each SKU, say, by month. The AVG function by SKU works great, but I want to round every value in the resulting matrix to the nearest cent like so:</P> <P>round(avg(TheCost),2) by ProductSku Month</P> <P>That syntax doesn't work and I can't pipe it to another eval for the round like I could without the double attributes in the BY clause. After that operation that averages by month and Sku, I have a huge matrix of rows and coulmns and I can't figure out how to round each column and feed that list back into the round function and have it come out as a matrix again. Rounding before the average of course does not help. Thoughts? Is there a switch to set the default precision on a an average or something that might help?</P> Thu, 06 Feb 2014 20:05:24 GMT https://community.splunk.com/t5/Splunk-Search/Nesting-a-round-function/m-p/140699#M38893 smileyge 2014-02-06T20:05:24Z https://community.splunk.com/t5/Splunk-Search/Nesting-a-round-function/m-p/140700#M38894 <P>You can do the rounding straight away without additional piping, like this:</P> <PRE><CODE>... | chart eval(round(avg(TheCost),2)) by ProductSku Month </CODE></PRE> <P>For doing more complicated things to fields with dynamic names and numbers, take a look at the <CODE>foreach</CODE> command: <A href="http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/foreach">http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/foreach</A></P> Thu, 06 Feb 2014 20:19:35 GMT https://community.splunk.com/t5/Splunk-Search/Nesting-a-round-function/m-p/140700#M38894 martin_mueller 2014-02-06T20:19:35Z https://community.splunk.com/t5/Splunk-Search/Nesting-a-round-function/m-p/140701#M38895 <P>Nice, I didn't know to add the eval around the nested math, that did it!</P> Thu, 06 Feb 2014 20:53:21 GMT https://community.splunk.com/t5/Splunk-Search/Nesting-a-round-function/m-p/140701#M38895 smileyge 2014-02-06T20:53:21Z