Splunk Search

Hex to Floating Point converter?

pchiu
Engager

Hi,

I have a field that contrains a hex-string representing an encoded-float number (sign+exponent+mantissa).
What would be a (nice) way of evaluating it into another field that would contain the actual float value?

Ex: https://gregstoll.com/~gregstoll/floattohex/

Thanks

PS: I can't change the original hex-string.

Tags (3)
0 Karma

woodcock
Esteemed Legend

Show us the sample data and the field and what the sample data should look like after conversion.

0 Karma

jeanyvesnolen
Path Finder

You could use a scripted lookup with a small python script doing conversion

transforms.conf

        [hex_converter]
        external_cmd = hex_converter.py hexstring floatnum
        fields_list = hexstring , floatnum

You can after use it with (if number_hex is your field)

| lookup hex_converter hexstring AS number_hex 

And you can run it automatically if you want see (automatic lookup)

0 Karma
Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In April, the Splunk Threat Research Team had 2 releases of new security content via the Enterprise Security ...

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

It’s go time — Boston, here we come!

Are you ready to take your Splunk skills to the next level? Get set, because Splunk University is back, and ...