Splunk Search

How to minipulate chart numbers?

clintla
Contributor

The below chart works great

chart sum(free_contig) over source by RaidGroup_Type

I'd like my sum (in megabytes) to be converted to gigabytes
& I was trying stuff like

chart sum(free_contig)/1024 over source by RaidGroup_Type
chart (sum(free_contig)/1024) over source by RaidGroup_Type
chart eval(sum(free_contig)/1024) over source by RaidGroup_Type

Oddly cant find much on dividing in the splunk documentation and
none of my attempts have worked.

Tags (2)
0 Karma
1 Solution

mw
Splunk Employee
Splunk Employee

I think this should work. Maybe you were just missing the rename operation (i.e. "... as free_config_GB"):

... | chart eval(sum(free_config) / 1024) as free_config_GB over source by RaidGroup_Type

View solution in original post

clintla
Contributor

That worked well.. thank you!

0 Karma

mw
Splunk Employee
Splunk Employee

Great! Please be a good netizen and accept the answer if it solved your problem. 🙂

0 Karma

mw
Splunk Employee
Splunk Employee

I think this should work. Maybe you were just missing the rename operation (i.e. "... as free_config_GB"):

... | chart eval(sum(free_config) / 1024) as free_config_GB over source by RaidGroup_Type
Get Updates on the Splunk Community!

Welcome to the Splunk Community!

(view in My Videos) We're so glad you're here! The Splunk Community is place to connect, learn, give back, and ...

Tech Talk | Elevating Digital Service Excellence: The Synergy of Splunk RUM & APM

Elevating Digital Service Excellence: The Synergy of Real User Monitoring and Application Performance ...

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...