Knowledge Management

convert memk() function usage

kannu
Communicator

Hello All ,

Greetings

 

I am looking for perfect explanation of memk() function used with convert statement , how it works and where to pass the m,g,k (The letter k indicates kilobytes, m indicates megabytes, and g indicates gigabytes) .

when i am trying this function to convert kb to KB , i am not seeing any change in values . Please help 

index=_internal source="*metric*" |convert memk(kb) as KB |table kb , KB

 

kannu_0-1720176545437.png

 

Thanks

Manish Kumar

 

 

 

Labels (1)
Tags (3)
0 Karma
1 Solution

isoutamo
SplunkTrust
SplunkTrust

Hi

this seems to work.

| makeresults
| eval gb=1, gb=gb . "g"
| convert memk(gb) as kb_c
| eval kb=round(kb_c/1024/1024,2)

Destination will be always as KB.

r. Ismo 

View solution in original post

bowesmana
SplunkTrust
SplunkTrust

What difference are you expecting? Are you trying to say that in your example kb is 1000 based and you want to convert to 1024 based. That is not what memk does. In this case just do

| eval KB=round(kb/1.024,3)

If they are both 1024 based, then they are the same number, so memk will not do anything.

 

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

this seems to work.

| makeresults
| eval gb=1, gb=gb . "g"
| convert memk(gb) as kb_c
| eval kb=round(kb_c/1024/1024,2)

Destination will be always as KB.

r. Ismo 

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

 Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

What's New in Splunk Observability - August 2025

What's New We are excited to announce the latest enhancements to Splunk Observability Cloud as well as what is ...

Introduction to Splunk AI

How are you using AI in Splunk? Whether you see AI as a threat or opportunity, AI is here to stay. Lucky for ...