topic Re: Convert String to Integer in Splunk Search

Convert String to Integer

nikhilmehra79 — Wed, 19 Mar 2014 22:45:30 GMT

I have extracted a value out of expression but seems like it is still treated as String not integer and i cant do any math on it.
For example before applying extraction the variable was : "0.05 %" - i extracted it to 0.05 but when i do any math on it it comes with blank value - as if splunk is not considering it as integer but as string - is that possible?

Re: Convert String to Integer

lguinn2 — Wed, 19 Mar 2014 23:03:06 GMT

You can fix that -

| eval myInt = tonumber(myString)

Re: Convert String to Integer

enno — Thu, 16 Jun 2016 03:37:20 GMT

Technically, this gives you a numeric not an integer though, which seems to be what the OP wanted. For those who come here looking for actual integers you likely need to eval your expression/field with round(), floor() or ceil() depending what sort of integer you need. For example, if you were calculating a row number from a sequence number you'd need something like:

... | eval row=floor(seqno % numcols) | ...

See http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonEvalFunctions#floor for more details.