Getting Data In

Large Decimal to Hex - Loss of Precision

pagaard
Observer

Greetings,

I would like to convert a large number to hex, just as described in this post.

While the above poster's issue was resolved via printf("%X",<field>), this did not work for me with a 19 digit uint64.

. Run-anywhere example:

 

| makeresults
| eval id="6932595798699158802"
| eval want="6035872600D42D12"
| eval dataHexUsingPrintf=printf("%X",id)
| table id want dataHexUsingPrintf

 

I've tried several combinations of exact(), tostring(id, "hex"), and all attempts fail, it appears due to a lack of precision in the initial conversion to 'number' type.

Example:

| makeresults
| eval id="6932595798699158802"
| convert num(id) as id_num
| eval want="6035872600D42D12"
| eval dataHexUsingPrintf=printf("%X",id_num)

Does Splunk support big num calculations of this type?
Is there a work around I'm missing to properly convert to hex?

 

Labels (1)
Tags (2)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Community Content Calendar, September edition

Welcome to another insightful post from our Community Content Calendar! We're thrilled to continue bringing ...

Splunkbase Unveils New App Listing Management Public Preview

Splunkbase Unveils New App Listing Management Public PreviewWe're thrilled to announce the public preview of ...

Leveraging Automated Threat Analysis Across the Splunk Ecosystem

Are you leveraging automation to its fullest potential in your threat detection strategy?Our upcoming Security ...