topic Why am I unable to convert my addcoltotals value of MB to TB using eval? in Splunk Search https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-convert-my-addcoltotals-value-of-MB-to-TB/m-p/210101#M61452 <P>Hello Splunk Ninjas</P> <P>I'm trying to convert my addcoltotals of MB to TB using the eval statement which does not work....</P> <PRE><CODE>index=myindex sourcetype=mysourcetype | table Cluster, Capacity_MB | addcoltotals label=TOTALS labelfield=Cluster | eval TOTALS = round(TOTALS/1024,2) </CODE></PRE> <P>Thanks!</P> Tue, 14 Jun 2016 15:26:43 GMT dean1 2016-06-14T15:26:43Z Why am I unable to convert my addcoltotals value of MB to TB using eval? https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-convert-my-addcoltotals-value-of-MB-to-TB/m-p/210101#M61452 <P>Hello Splunk Ninjas</P> <P>I'm trying to convert my addcoltotals of MB to TB using the eval statement which does not work....</P> <PRE><CODE>index=myindex sourcetype=mysourcetype | table Cluster, Capacity_MB | addcoltotals label=TOTALS labelfield=Cluster | eval TOTALS = round(TOTALS/1024,2) </CODE></PRE> <P>Thanks!</P> Tue, 14 Jun 2016 15:26:43 GMT https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-convert-my-addcoltotals-value-of-MB-to-TB/m-p/210101#M61452 dean1 2016-06-14T15:26:43Z Re: Why am I unable to convert my addcoltotals value of MB to TB using eval? https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-convert-my-addcoltotals-value-of-MB-to-TB/m-p/210102#M61453 <P>Hi,</P> <P>Your labelfield=Cluster means that's the name of the field that it's going to store the string "TOTALS".<BR /> TOTALS is not a field, it's a value. The field is Capacity_MB.</P> <P>Therefore if you just want to apply it to that particular row in your table you can do it this way:</P> <PRE><CODE>| eval Capacity_MB = if(Cluster == "TOTALS", round(Capacity_MB/1024,2), Capacity_MB) </CODE></PRE> <P>Hope that makes sense.</P> <P>Thanks,<BR /> J</P> Tue, 14 Jun 2016 15:40:42 GMT https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-convert-my-addcoltotals-value-of-MB-to-TB/m-p/210102#M61453 javiergn 2016-06-14T15:40:42Z Re: Why am I unable to convert my addcoltotals value of MB to TB using eval? https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-convert-my-addcoltotals-value-of-MB-to-TB/m-p/210103#M61454 <P>Excellent - That worked - Thank you!</P> Tue, 14 Jun 2016 19:36:38 GMT https://community.splunk.com/t5/Splunk-Search/Why-am-I-unable-to-convert-my-addcoltotals-value-of-MB-to-TB/m-p/210103#M61454 dean1 2016-06-14T19:36:38Z