Hi Team,
I am using below query to get my total closing balance
index="abc*" sourcetype=600000304_gg_abs_ipc2 " AssociationProcessor - compareTransformStatsData : statisticData: StatisticData" source="/amex/app/gfp-settlement-transform/logs/gfp-settlement-transform.log" |rex " AssociationProcessor - compareTransformStatsData : statisticData: StatisticData totalClosingBal=(?<totalClosingBal>)"|table _time totalClosingBal| sort _time
I am getting current result as below:
7.71727634934E10
I want this E10 to be in actual numbers which can be done by below logic:
7.71727634934 × 1010
Can someone guide me how can I do this in splunk query.
Assuming you have extracted the closing balance to the totalClosingBal field, you could try this
| eval bal=tonumber(mvindex(split(totalClosingBal,"E"),0)) * pow(10,tonumber(mvindex(split(totalClosingBal,"E"),1)))
Assuming you have extracted the closing balance to the totalClosingBal field, you could try this
| eval bal=tonumber(mvindex(split(totalClosingBal,"E"),0)) * pow(10,tonumber(mvindex(split(totalClosingBal,"E"),1)))