Rounding a Calculated Field

[jason_hotchkiss]

Greeting Splunkers:

Referring to: eval - Splunk Documentation where:

round(X,Y)

Returns X rounded to the amount of decimal places specified by Y. The default is to round to an integer.

I am attempting the following:

| eval MemoryUtilization = round((memTotalMB - memFreeMB) / memTotalMB * 100),2)

I am receiving the following error: Error in 'eval' command: Failed to parse the provided arguments. Usage: eval dest_key = expression.

I know I can do it this way:

| eval MemoryUtilization = ((memTotalMB - memFreeMB) / memTotalMB * 100)
| eval MemoryUtilization = round(MemoryUtilization,2)

Is there a way to combine the two eval statements into one?

Thank you!

[anilchaithu · Accepted solution]

@jason_hotchkiss 

parentheses is missing. The below should work

| eval MemoryUtilization = round(((memTotalMB - memFreeMB) / memTotalMB * 100),2)

-- Hope this helps

[jason_hotchkiss]

I was so close... thank you!