Splunk Search

How to reduce the number of decimals in results from 6 digits to 1 digit

Communicator

Hi all,

I am running below search which is returning 6 decimals for duration, how do i reduce to 1?

example : result returning is 32.708929 and result we need is 32.7

index="pilot_1086_dbconnectinfo" spname="hhv1087_sp_addanotheritembkngdetails" | eval duration=round(duration/1000,1) | eval date=substr(date,1,10) | chart Avg(duration) over date_hour by date | sort  date_hour  | fillnull value=0
0 Karma
1 Solution

Communicator

below search is working fine i got my answer

index="pilot_1086_dbconnectinfo" spname="hhv1087_sp_addanotheritembkngdetails" | eval duration=round(duration/1000,1) | eval date=substr(date,1,10) | chart eval(round(avg(duration), 1)) AS avg_duration over date_hour by date | sort  date_hour  | fillnull value=0

View solution in original post

0 Karma

Communicator

below search is working fine i got my answer

index="pilot_1086_dbconnectinfo" spname="hhv1087_sp_addanotheritembkngdetails" | eval duration=round(duration/1000,1) | eval date=substr(date,1,10) | chart eval(round(avg(duration), 1)) AS avg_duration over date_hour by date | sort  date_hour  | fillnull value=0

View solution in original post

0 Karma

Communicator

alt text

0 Karma