Splunk Search

Multiply value by 100.

deanamite91
Explorer

I have the following search

index="commercial_performance"  Cat1="Unit Cost Modelled Standard Activity Rate" Value!="within *" $month_token$ $Customer_token$ $SL_token$ | stats avg(Value) AS "Planned" by Cat      
| appendcols [search index="commercial_performance"  Cat1="Unit Cost Actual" Value!="within *" $month_token$ $Customer_token$ $SL_token$ | stats avg(Value) AS "Actual" by Cat]

I want to multiply 'Value' by 100. How do I do this?

Tags (2)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Try this:

... | eval Value=Value*100 | stats avg(Value) ...

You'll need the eval command in both your main search and in the subsearch.

---
If this reply helps you, Karma would be appreciated.
0 Karma

somesoni2
Revered Legend

Try this

index="commercial_performance"  Cat1="Unit Cost Modelled Standard Activity Rate" Value!="within *" $month_token$ $Customer_token$ $SL_token$  | eval Value=Value*100 | stats avg(Value) AS "Planned" by Cat      
 | appendcols [search index="commercial_performance"  Cat1="Unit Cost Actual" Value!="within *" $month_token$ $Customer_token$ $SL_token$ | eval Value=Value*100 | stats avg(Value) AS "Actual" by Cat]

OR

index="commercial_performance"  Cat1="Unit Cost Modelled Standard Activity Rate" Value!="within *" $month_token$ $Customer_token$ $SL_token$ | stats avg(Value) AS "Planned" by Cat      
 | appendcols [search index="commercial_performance"  Cat1="Unit Cost Actual" Value!="within *" $month_token$ $Customer_token$ $SL_token$ | stats avg(Value) AS "Actual" by Cat] | eval Planned=Planned*100 | eval Actual=Actual*100
0 Karma
Get Updates on the Splunk Community!

Introducing the 2024 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...

Introducing the 2024 Splunk MVPs!

We are excited to announce the 2024 cohort of the Splunk MVP program. Splunk MVPs are passionate members of ...

Splunk Custom Visualizations App End of Life

The Splunk Custom Visualizations apps End of Life for SimpleXML will reach end of support on Dec 21, 2024, ...