Hello,
I've noticed that the addcoltotals
command doesn't display decimals if the total contains a decimal. Run anywhere code:
| makeresults
| eval decimal = 1.5
| eval whole = 1.5
| append [ | makeresults
| eval decimal = 1
| eval whole = 1.5]
| addcoltotals
I'm using Splunk 6.4.1 and my results are:
decimal,whole
1.5,1.5
1,1.5
2,3.0 (here it truncates to a single decimal place for the decimal field)
Is there something I'm missing?
Regards,
Andrew
hi @andrewtrobec
try like this
| makeresults
| eval decimal = 1.5
| eval whole = 1.5
| append [ | makeresults
| eval decimal = 1
| eval whole = 1.5]
|eval decimal=round(decimal,2) |eval whole=round(whole,2) |addcoltotals
hi @andrewtrobec
try like this
| makeresults
| eval decimal = 1.5
| eval whole = 1.5
| append [ | makeresults
| eval decimal = 1
| eval whole = 1.5]
|eval decimal=round(decimal,2) |eval whole=round(whole,2) |addcoltotals
Hi @andrewtrobec
Did you get that.
If my answer helped you please accept answer or up vote
This is a good workaround, thank you!
It looks like addcoltotals
is using the lowest level of precision of the values it's adding. Since '1' has zero digits of precision, that's what is used for the result.