Hi,
I have simple chart visulization, with base SPL
.... | chart sum(cost) AS total_cost BY bill_date
I'm trying to add a "$" format to total_cost to show on the columns. Tried every Google and ChatGPT trick and I can't get it working. Any ideas? Thanks!
Do the Google and ChatGPT tricks include this?
... | chart sum(cost) AS total_cost BY bill_date
| eval total_cost = "$" . total_cost
I'm not entirely sure it will work, but worth a try.
I was trying to make this work too but unfortunately @chrisboy68 I'm also a bit of a dead end.
Prefixing by eval-ing the field for me breaks the chart as its no longer a numeric value, there is no option to add a prefix/suffix in the visualisation; I scoured the non-UI based options from the viz docs (e.g. https://splunkui.splunk.com/Packages/visualizations/Column) but also couldnt find any way to do this, sorry!
🌟 Did this answer help you? If so, please consider:
Your feedback encourages the volunteers in this community to continue contributing
Thanks. That was my first try, but still didn't work.