Hi,
My current requirement is showing the table values in Italy numeric format instead of default American format. I mean instead of dot(.) as decimal separator I have to replace it with comma(,) Example: 14.260410 should be shown as 14,260410
I have modified the default locale in i18n.py from en-US to it_IT and restarted splunk but it didn't help.
Any help would be appreciated.
Thanks
Bala
Try this:
| rex field=_raw mode=sed "s/\./,/"
And let know what output you get!
This will work only if 14.260410
comes at the start of the event.
If this is not working properly then give me a sample full event.
Hi Bala
I've done it with this way:
| eval usedkb=tostring(usedkb, "commas")
| rex field=usedkb mode=sed "s/,/'/g"
| rex field=usedkb mode=sed "s/\./,/g"
First to eliminate the 1,000 comma to any other char and then replace the . to ,