Splunk Search

How to reduce the number of decimals in results from 6 digits to 1 digit

puneethgowda
Communicator

Hi all,

I am running below search which is returning 6 decimals for duration, how do i reduce to 1?

example : result returning is 32.708929 and result we need is 32.7

index="pilot_1086_dbconnectinfo" spname="hhv1087_sp_addanotheritembkngdetails" | eval duration=round(duration/1000,1) | eval date=substr(date,1,10) | chart Avg(duration) over date_hour by date | sort  date_hour  | fillnull value=0
0 Karma
1 Solution

puneethgowda
Communicator

below search is working fine i got my answer

index="pilot_1086_dbconnectinfo" spname="hhv1087_sp_addanotheritembkngdetails" | eval duration=round(duration/1000,1) | eval date=substr(date,1,10) | chart eval(round(avg(duration), 1)) AS avg_duration over date_hour by date | sort  date_hour  | fillnull value=0

View solution in original post

0 Karma

puneethgowda
Communicator

below search is working fine i got my answer

index="pilot_1086_dbconnectinfo" spname="hhv1087_sp_addanotheritembkngdetails" | eval duration=round(duration/1000,1) | eval date=substr(date,1,10) | chart eval(round(avg(duration), 1)) AS avg_duration over date_hour by date | sort  date_hour  | fillnull value=0

View solution in original post

0 Karma

puneethgowda
Communicator

alt text

0 Karma
.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!