Dashboards & Visualizations

decimal

simo
Path Finder

Hi All,

I have a Dashboard, with the count of completed requests

 COMPLETED
 46018
 12003
 1889
 1
 4
 7
TOTAL59922

 

if I add the separator

| eval COMPLETED= tostring(COMPLETED, "commas")

 COMPLETED
 46,018
 12,003
 1,889
 1
 4
 7
TOTAL12

 

the total of Dashbord becomes 12. I would like it to become on the total 59,922

how can i solve?

 

by

Simone

Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try this:

| fieldformat COMPLETED=tostring(COMPLETED, "commas")
0 Karma

simo
Path Finder

Hi @ITWhisperer 

now I'm in this situation

 COMPLETED
 46,018
 12,003
 1,889
 1
 4
 7
TOTAL59922

 

Is it possible to add formatting to the total as well?

 

Simone

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It should have already worked

| makeresults 
| eval _raw=" 	COMPLETED
 	46018
 	12003
 	1889
 	1
 	4
 	7"
| multikv forceheader=1
| table COMPLETED
| addtotals col=t row=f
| fieldformat COMPLETED=tostring(COMPLETED,"commas")

ITWhisperer_0-1623254863036.png

Which version of splunk are you using?

0 Karma

simo
Path Finder

i am not using the | addtotals col=t row=f but the format visualization on the dash

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...