convert memk() function usage

[kannu]

Hello All ,

Greetings

I am looking for perfect explanation of memk() function used with convert statement , how it works and where to pass the m,g,k (The letter k indicates kilobytes, m indicates megabytes, and g indicates gigabytes) .

when i am trying this function to convert kb to KB , i am not seeing any change in values . Please help 

index=_internal source="*metric*" |convert memk(kb) as KB |table kb , KB

kannu_0-1720176545437.png

Thanks

Manish Kumar

[bowesmana]

What difference are you expecting? Are you trying to say that in your example kb is 1000 based and you want to convert to 1024 based. That is not what memk does. In this case just do

| eval KB=round(kb/1.024,3)

If they are both 1024 based, then they are the same number, so memk will not do anything.

[isoutamo · Accepted solution]

Hi

this seems to work.

| makeresults
| eval gb=1, gb=gb . "g"
| convert memk(gb) as kb_c
| eval kb=round(kb_c/1024/1024,2)

Destination will be always as KB.

r. Ismo