Splunk Search

How to minipulate chart numbers?

clintla
Contributor

The below chart works great

chart sum(free_contig) over source by RaidGroup_Type

I'd like my sum (in megabytes) to be converted to gigabytes
& I was trying stuff like

chart sum(free_contig)/1024 over source by RaidGroup_Type
chart (sum(free_contig)/1024) over source by RaidGroup_Type
chart eval(sum(free_contig)/1024) over source by RaidGroup_Type

Oddly cant find much on dividing in the splunk documentation and
none of my attempts have worked.

Tags (2)
0 Karma
1 Solution

mw
Splunk Employee
Splunk Employee

I think this should work. Maybe you were just missing the rename operation (i.e. "... as free_config_GB"):

... | chart eval(sum(free_config) / 1024) as free_config_GB over source by RaidGroup_Type

View solution in original post

clintla
Contributor

That worked well.. thank you!

0 Karma

mw
Splunk Employee
Splunk Employee

Great! Please be a good netizen and accept the answer if it solved your problem. 🙂

0 Karma

mw
Splunk Employee
Splunk Employee

I think this should work. Maybe you were just missing the rename operation (i.e. "... as free_config_GB"):

... | chart eval(sum(free_config) / 1024) as free_config_GB over source by RaidGroup_Type
Get Updates on the Splunk Community!

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...

Index This | What goes up and never comes down?

January 2026 Edition  Hayyy Splunk Education Enthusiasts and the Eternally Curious!   We’re back with this ...

Splunkers, Pack Your Bags: Why Cisco Live EMEA is Your Next Big Destination

The Power of Two: Splunk + Cisco at "Ludicrous Scale"   You know Splunk. You know Cisco. But have you seen ...