Splunk Search

How do I display 20% as an integer and still display as 20%

heamik
Engager

If I execute...

| stats avg(mem_free_percent) as mfp by Region
| fieldformat mfp=round(mfp, 1)."%"

It will display values like 20.5% However it breaks my radial dials I am assuming because the value gets converted to a string value. "fieldformat mfp=round(mfp, 1)" by itself still works in radial dials however 20.5% gets displayed as "20.5".

How do I add the % sign and still maintain the integer value?

Thanks

-Mike

Labels (1)
Tags (3)
0 Karma

rnowitzki
Builder

Hi @heamik,

with fieldformat you should be good. It's exactly made to keep the original type of data.

WIth this simple sample I could not reproduce your issue. After using fieldformat you can still calculate with mfp

|  makeresults 
| eval mfp=50.23
| fieldformat mfp=round(mfp, 1)."%"
| eval mfp=mfp+10.45

 

You could check what Splunk "thinks" the mfp is with | eval mfp_type = typeof(mfp)
Maybe something prior to the fieldformat already transforms it to a string?

You could try | eval mfp = tonumber(mfp) 

Hope it helps.
BR
Ralph


--
Karma and/or Solution tagging appreciated.
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...