https://community.splunk.com/t5/Splunk-Search/Convert-bytes-to-GB/m-p/263193#M79001 <P>Splunk noob here. I've been visting this site for awhile now so i decided to create my own account so I can learn more about the product.</P> <P>I'm trying to create a bandwidth utilization for my web logs and I'm a bit confused on what search string should I be using to get accurate date. I have tried the following and got different ressults.</P> <P>example A :<BR /> base search | eval s_kilobytes=(sentbyte/1024) | eval s_megabytes=s_kilobytes/1024 | eval s_gigabytes=s_megabytes/1024 | eval r_kilobytes=(rcvdbyte/1024) | eval r_megabytes=r_kilobytes/1024 | eval r_gigabytes=r_megabytes/1024| timechart sum(r_gigabytes) as "RECEIVED" sum(s_gigabytes)</P> <P>example B:<BR /> base search | | stats sum(eval(((sentbyte*8)/(1024*1024*1024*1024) + (rcvdbyte*8)/(1024*1024*1024*1024)))) </P> <P>Which one is the more accurate one and what does the value 8 on second example means?</P> <P>Abe</P> Tue, 29 Sep 2020 08:04:26 GMT Eyb 2020-09-29T08:04:26Z https://community.splunk.com/t5/Splunk-Search/Convert-bytes-to-GB/m-p/263193#M79001 <P>Splunk noob here. I've been visting this site for awhile now so i decided to create my own account so I can learn more about the product.</P> <P>I'm trying to create a bandwidth utilization for my web logs and I'm a bit confused on what search string should I be using to get accurate date. I have tried the following and got different ressults.</P> <P>example A :<BR /> base search | eval s_kilobytes=(sentbyte/1024) | eval s_megabytes=s_kilobytes/1024 | eval s_gigabytes=s_megabytes/1024 | eval r_kilobytes=(rcvdbyte/1024) | eval r_megabytes=r_kilobytes/1024 | eval r_gigabytes=r_megabytes/1024| timechart sum(r_gigabytes) as "RECEIVED" sum(s_gigabytes)</P> <P>example B:<BR /> base search | | stats sum(eval(((sentbyte*8)/(1024*1024*1024*1024) + (rcvdbyte*8)/(1024*1024*1024*1024)))) </P> <P>Which one is the more accurate one and what does the value 8 on second example means?</P> <P>Abe</P> Tue, 29 Sep 2020 08:04:26 GMT https://community.splunk.com/t5/Splunk-Search/Convert-bytes-to-GB/m-p/263193#M79001 Eyb 2020-09-29T08:04:26Z https://community.splunk.com/t5/Splunk-Search/Convert-bytes-to-GB/m-p/263194#M79002 <P>In your second example, you shouldn't be multiplying a byte by 8. You're thinking of 8 bits in a byte. </P> <P>When you do your division, you can just do: </P> <PRE><CODE>| eval s_GB=sentbyte/1024/1024/1024 | eval r_GB=rcvdbyte/1024/1024/1024 | timechart sum(r_GB) as "RECEIVED", sum(s_GB) as "SENT" </CODE></PRE> Sat, 05 Dec 2015 01:49:36 GMT https://community.splunk.com/t5/Splunk-Search/Convert-bytes-to-GB/m-p/263194#M79002 hortonew 2015-12-05T01:49:36Z https://community.splunk.com/t5/Splunk-Search/Convert-bytes-to-GB/m-p/263195#M79003 <P>Hortonew,</P> <P>Sorry for the delay, caught up with lots of stuff. THANK YOU! Appreciate the help.</P> <P>Abe</P> Thu, 10 Dec 2015 13:18:09 GMT https://community.splunk.com/t5/Splunk-Search/Convert-bytes-to-GB/m-p/263195#M79003 Eyb 2015-12-10T13:18:09Z