Dashboards & Visualizations

decimal

simo
Path Finder

Hi All,

I have a Dashboard, with the count of completed requests

 COMPLETED
 46018
 12003
 1889
 1
 4
 7
TOTAL59922

 

if I add the separator

| eval COMPLETED= tostring(COMPLETED, "commas")

 COMPLETED
 46,018
 12,003
 1,889
 1
 4
 7
TOTAL12

 

the total of Dashbord becomes 12. I would like it to become on the total 59,922

how can i solve?

 

by

Simone

Labels (1)
Tags (1)
0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

Try this:

| fieldformat COMPLETED=tostring(COMPLETED, "commas")
0 Karma

simo
Path Finder

Hi @ITWhisperer 

now I'm in this situation

 COMPLETED
 46,018
 12,003
 1,889
 1
 4
 7
TOTAL59922

 

Is it possible to add formatting to the total as well?

 

Simone

0 Karma

ITWhisperer
SplunkTrust
SplunkTrust

It should have already worked

| makeresults 
| eval _raw=" 	COMPLETED
 	46018
 	12003
 	1889
 	1
 	4
 	7"
| multikv forceheader=1
| table COMPLETED
| addtotals col=t row=f
| fieldformat COMPLETED=tostring(COMPLETED,"commas")

ITWhisperer_0-1623254863036.png

Which version of splunk are you using?

0 Karma

simo
Path Finder

i am not using the | addtotals col=t row=f but the format visualization on the dash

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...