Dashboards & Visualizations
Highlighted

How to round decimal places?

Path Finder

I have read through the related answers to questions similar to this one, but I just can't make it work for some reason. I am running the following search:

index=internal source=*metrics.log group=perindexthruput series!=* | eval totalMB = kb/1024 | chart sum(totalMB) as total

and displaying it as a single value on a dashboard. It returns a value with a ton of decimal places and I would like to have it rounded to 2 places.

Any help is greatly appreciated 🙂

Referenced:
http://splunk-base.splunk.com/answers/45110/round-splunk-license-usage
http://splunk-base.splunk.com/answers/8046/rounding-decimal-places

Highlighted

Re: How to round decimal places?

New Member

index=internal source=metrics.log group=perindexthruput series!= | eval totalMB = round(kb/1024,2) | chart sum(totalMB) as total

0 Karma
Highlighted

Re: How to round decimal places?

Path Finder

Tried that; no luck. It would need to be edited to series!=_ but even that didn't fix it. Also, now the search is returning "N/A"

0 Karma
Highlighted

Re: How to round decimal places?

Splunk Employee
Splunk Employee

see the eval function round(X,Y)

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/CommonEvalFunctions

example :

index=_internal source=metrics.log group=per_index_thruput series!=_ | eval totalMB = kb/1024 | chart sum(totalMB) as total | eval total=round(total,2)
Highlighted

Re: How to round decimal places?

Path Finder

Sorry for the delay. I have resolved this issue. There was an issue with the formatting. Here is the correct syntax:

index=_internal source=*metrics.log group=per_index_thruput series!=_* | eval totalMB = round(kb/1024, 2) | chart sum(totalMB) as total

View solution in original post

Highlighted

Re: How to round decimal places?

Path Finder

Try this, I got joshbronko's working with the addition of a couple asterisks:

index=internal source=*metrics.log group=perindexthruput series!=* | eval totalMB = round(kb/1024,2) | chart sum(totalMB) as total