Archive

How to get only 2 decimal values without rounding?

I have the value in the field as mentioned below ..

data
1234.456
1256.445
12.456
156.446

I need the output as mentioned below.
Kindly help me to achieve it.

data
1234.45
1256.44
12.45
156.44

Thanks in advance.

Tags (2)
0 Karma

SplunkTrust
SplunkTrust

Try this

your base search | eval data=replace(data,"(\d+\.\d\d)\d*","\1")
0 Karma

Legend

Try using regex. This should work (change data to fieldname of choice)

... | rex "(?<data>\d+\.\d{0,2})" 
0 Karma