Currently doing a search and converting results from KB to MB but I only want to see 2 decimal places not 6 as it's currently being shown. Below is my search.
Name: 'Daily-license-usage'
Query Terms: 'index=_internal sourcetype=splunkd source=metrics \"group=per_sourcetype_thruput\" NOT series=\"filetrackercrclog\" NOT series=\"splunk*\" NOT series=\"audittrail\" NOT series=\"scheduler\" NOT series=\"searches\" NOT series=\"stash\" NOT series=\"entity\"| eval events=eps*kb/kbps | stats sum(events) as events sum(kb) as MB by series | eval events=round(events,0) | eval kb=round(kb,1)/1024'
At the end of the query put
| eval MB = round(MB/1024,2)
instead of
| eval kb=round(kb,1)/1024'
At the end of the query put
| eval MB = round(MB/1024,2)
instead of
| eval kb=round(kb,1)/1024'
So close! Do the round after the math: |eval kb=round(kb / 1024, 2)