Splunk Search

bytes_in and bytes_out - Does this mean just bytes or megabytes?

summitsplunk
Communicator

For example: stats sum(bytes_in) AS bytes_in, sum(bytes_out) AS bytes_out

is the sum going to be in bytes like the description or mb?

Tags (1)
0 Karma
1 Solution

jnudell_2
Builder

Hi Summitsplunk,
It depends on what your data source is and how it defines bytes, but in this case, I would think bytes is bytes, and not mb. You would have to use the normal calculation to get mb (ie; round( bytes_in / 1024, 2) )

View solution in original post

jnudell_2
Builder

Hi Summitsplunk,
It depends on what your data source is and how it defines bytes, but in this case, I would think bytes is bytes, and not mb. You would have to use the normal calculation to get mb (ie; round( bytes_in / 1024, 2) )

Vijeta
Influencer

will be in bytes. If you want in MB you need to divide it by (1024 * 1024)

0 Karma
Get Updates on the Splunk Community!

Splunk Cloud | Empowering Splunk Administrators with Admin Config Service (ACS)

Greetings, Splunk Cloud Admins and Splunk enthusiasts! The Admin Configuration Service (ACS) team is excited ...

Tech Talk | One Log to Rule Them All

One log to rule them all: how you can centralize your troubleshooting with Splunk logs We know how important ...

Splunk Security Content for Threat Detection & Response, Q1 Roundup

Join Principal Threat Researcher, Michael Haag, as he walks through: An introduction to the Splunk Threat ...