Hello experts,
How to round up the values either before decimal point or up to max two decimal point.
Below is my search query:
| mstats avg(_value) prestats=true WHERE metric_name="memory.used" AND "index"="*" AND
(
"host"="fsx2098" OR
"host"="fsx2099" OR
"host"="fsx0102" OR
"host"="fsx0319" OR
"host"="fsxtp072"
) AND `sai_metrics_indexes` span=auto BY host
| timechart avg(_value) useother=false BY host WHERE max in top20
| fields - _span*
Below is Result of above:
Desired Value:
time host 1 host2 host3 host4
2022-03-29 13:20:00 26 33 34 32
2022-03-29 13:21:00 27 34 34 34
OR
time host 1 host2 host3 host4
2022-03-29 13:20:00 26.80 33.96 34.25 32.93
Any help will be much appreciated.
Try like this
| mstats avg(_value) prestats=true WHERE metric_name="memory.used" AND "index"="*" AND
(
"host"="fsx2098" OR
"host"="fsx2099" OR
"host"="fsx0102" OR
"host"="fsx0319" OR
"host"="fsxtp072"
) AND `sai_metrics_indexes` span=auto BY host
| timechart avg(_value) useother=false BY host WHERE max in top20
| fields - _span*
| foreach * [| eval "<<FIELD>>"=round('<<FIELD>>',2) ]
Change the round function parameter based on how much precision you want. (ignore the parameter for no decimal point)
Try like this
| mstats avg(_value) prestats=true WHERE metric_name="memory.used" AND "index"="*" AND
(
"host"="fsx2098" OR
"host"="fsx2099" OR
"host"="fsx0102" OR
"host"="fsx0319" OR
"host"="fsxtp072"
) AND `sai_metrics_indexes` span=auto BY host
| timechart avg(_value) useother=false BY host WHERE max in top20
| fields - _span*
| foreach * [| eval "<<FIELD>>"=round('<<FIELD>>',2) ]
Change the round function parameter based on how much precision you want. (ignore the parameter for no decimal point)
Is there anything which we can only get values before decimal, another point if there is a better way to put the multiple host into a bucket rather calling then with multiple "OR" conditions.
Sorry for asking too much.