• Todd Waller

Splunk - Quick Tip: Formatting currency

Hello Everyone! This weeks post is a quick tip on formatting currency. Splunk doesn't auto-format so sometimes figuring out how to format currency can be tricky so here's the quick tip!

So say you have a data set that looks like this for example:

What you could do is add an eval statement like this to format the field containing the data you want to be formatted as currency:

And then run the search again and get data formatted:

Hopefully this quick tip helps you to achieve your desired results. Talk to you all again soon and have a great weekend!!

47 views0 comments

Recent Posts

See All

So I've been thinking today about how useful Splunk is on the "blue" side of the house. What about the Purple and Red side? What features would Splunk need to gain to add value to the other 2/3rds of