Hi, I would like to fix this alert to show the results in the value columm as a double digit percentage and have the percent sign after the number. for example 27%. Thank you in advance for your help.
MY SPL
index=perfmon object=Memory "% Committed Bytes In Use"
| where Value < 25
| table _time, host, Value, date
| dedup host
My Result.
Performing this eval anytime after the where clause should do it.
index=perfmon object=Memory "% Committed Bytes In Use"
| where Value < 25
| table _time, host, Value, date
| dedup host
| eval Value=round(Value, 0)."%"
Performing this eval anytime after the where clause should do it.
index=perfmon object=Memory "% Committed Bytes In Use"
| where Value < 25
| table _time, host, Value, date
| dedup host
| eval Value=round(Value, 0)."%"
Yes, that works. thank you dtburrows3.