Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

Can't run a floor on a timechart column

$
0
0

I'm trying to run an floor command on a column in a timechart in order to get a whole number. ... | timechart span=10m eval(floor(count(LINE)/5)) as logins by USERNAME

The search fails with Error in 'timechart' command: The eval expression has no fields: 'floor(count(LINE)/5)'

The search works if I take out the floor() eval(count(LINE)/5). How can I get this to work?


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>