Splunk Search

Quick Question: Chart Scale

Path Finder

I have a chart with numbers in millions, e.g. 430938493293. How do I display it such that it shows 430,938 in millions?

Thank you.

Tags (2)

SplunkTrust
SplunkTrust

Easiest way is probably to use | eval to go ahead and convert the units on your source data. Assuming your field is named foo, then something like this:

| eval megafoo=foo/1000000

And then chart megafoo instead.