Hi.
I have one issue with my search. I need to multiply three fields to get another new field. When I do the multiply, in some cases it works right, but with some values it rounds the result...
For example:
I need to multiply next fields: cw \* tcw \* aw and put the result in the field called wt. There's no problem when these fields are integers, in this case Splunk multiplies them well, but when these fields are decimal, Splunk rounds the result, and I don't know why.
The part of the search that does this is:
| convert num(cw) as cw, num(tcw) as tcw, num(aw) as aw
| eval wt=cw \* tcw \* aw
| stats values(wt) values(cw) values(tcw) values(aw) by Month, cou, techclu, app, appid, act, ow, aid, acty, afm ,camp
Anyone knows what can be happening?? I've tried all, and it returns me the same result again and again.
Thanks!!
... View more