Splunk Search

How do I display 20% as an integer and still display as 20%

heamik
Engager

If I execute...

| stats avg(mem_free_percent) as mfp by Region
| fieldformat mfp=round(mfp, 1)."%"

It will display values like 20.5% However it breaks my radial dials I am assuming because the value gets converted to a string value. "fieldformat mfp=round(mfp, 1)" by itself still works in radial dials however 20.5% gets displayed as "20.5".

How do I add the % sign and still maintain the integer value?

Thanks

-Mike

Labels (2)
Tags (3)
0 Karma

rnowitzki
Builder

Hi @heamik,

with fieldformat you should be good. It's exactly made to keep the original type of data.

WIth this simple sample I could not reproduce your issue. After using fieldformat you can still calculate with mfp

|  makeresults 
| eval mfp=50.23
| fieldformat mfp=round(mfp, 1)."%"
| eval mfp=mfp+10.45

 

You could check what Splunk "thinks" the mfp is with | eval mfp_type = typeof(mfp)
Maybe something prior to the fieldformat already transforms it to a string?

You could try | eval mfp = tonumber(mfp) 

Hope it helps.
BR
Ralph


--
Karma and/or Solution tagging appreciated.
0 Karma
Get Updates on the Splunk Community!

Devesh Logendran, Splunk, and the Singapore Cyber Conquest

At this year’s Splunk University, I had the privilege of chatting with Devesh Logendran, one of the winners in ...

There's No Place Like Chrome and the Splunk Platform

WATCH NOW!Malware. Risky Extensions. Data Exfiltration. End-users are increasingly reliant on browsers to ...

Customer Experience | Join the Customer Advisory Board!

Are you ready to take your Splunk journey to the next level? 🚀 We invite you to join our elite squad ...