Dashboards & Visualizations

how can show leading zeros in single value dashboard ??

suryavicky21
Explorer

i have a query which result in a 6 digit number for a fieldname that might include leading "0" like 001234, 012345, 123456

my query returns a single fieldname, something like fieldname=001234, and i want to show this number on a single value dashboard. but i go to the visualization the leading zero is removed by splunk and show just the number 1234

please help me achieve this and show the number in a single value dashboard with the leading "0"

alt text

0 Karma

okayal
Explorer

I am sure there is a better way to solve this, but if you are in a hurry and don't mind a non-numerical suffix, you can concatenate a character such as * to the end of the number

For example
| eval digit=digit."*"

From the looks of it, the visualization itself does some sort of zero and white space stripping, and eval=tostring(digit) does not work either.

Hope this helps

0 Karma

suryavicky21
Explorer

@okayal thanks for the comments, though after that the leading zero is stripped off on the visualization while it is present in the search results.

0 Karma

okayal
Explorer

Strange, I ran the following, and its working for me

| makeresults
| eval digit="00123"
| eval digit=digit."*"

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...