Splunk Enterprise

help on round in timechart

jip31
Motivator

hello

I dont succeed to round the fiel ResponseTime which is a decimaf field with a point instaed a comma

 

index=tutu 
| eval web_duration_ms=round('web_duration_ms', 0)
| timechart avg(web_duration_ms) as ResponseTime by Url

 

 what is wrong please?

Tags (1)
0 Karma

ashvinpandey
Contributor

@jip31 Please try using the below code:

index=tutu 
| timechart avg(web_duration_ms) as ResponseTime by Url
| eval ResponseTime=round(ResponseTime, 3)

Also, if this reply helped you a thumbs up would be appreciated.

0 Karma

jip31
Motivator

hi

it dont works

is anybody can help please?

0 Karma
Get Updates on the Splunk Community!

Splunk Mobile: Your Brand-New Home Screen

Meet Your New Mobile Hub  Hello Splunk Community!  Staying connected to your data—no matter where you are—is ...

Introducing Value Insights (Beta): Understand the Business Impact your organization ...

Real progress on your strategic priorities starts with knowing the business outcomes your teams are delivering ...

Enterprise Security (ES) Essentials 8.3 is Now GA — Smarter Detections, Faster ...

As of today, Enterprise Security (ES) Essentials 8.3 is now generally available, helping SOC teams simplify ...