Splunk Search

How to convert Bytes to Mbytes in a search?

blebit
Path Finder

Hi everyone

I have this field: File_Size="File size (bytes): [byte_size]", where byte_size is nr; e.g File_Size="File size (bytes): 14642"... and I want to convert it to MB

Can anyone help me on this?

Thank you

richgalloway
SplunkTrust
SplunkTrust

Do this.

... | eval MB_size=byte_size/(1024*1024) | ...
---
If this reply helps you, Karma would be appreciated.
0 Karma

rafamss
Contributor

Hi blebit,

First, I'll a regex for get this content like as : rex max_match=0 "(?File_Size="File size (bytes): =.*)" ;
Second, I would do a simple multiplication of the field Bytes per 1000 or 1024, as you see fit.

I hope have help.

Rafael Martins

0 Karma
Get Updates on the Splunk Community!

Index This | Why did the turkey cross the road?

November 2025 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Feel the Splunk Love: Real Stories from Real Customers

Hello Splunk Community,    What’s the best part of hearing how our customers use Splunk? Easy: the positive ...