Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
Highlighted
zargaran Honored Contributor.
Honored Contributor.
689 views

Convert a Size Numerical Value in ArcSight Logger Search Query sintax.

Jump to solution

Hi All

I submited this search query in arcsight logger :

deviceProduct = "IP Flow" and sourceAddress IS NOT NULL | chart sum(bytesIn) AS "Total Incomming Traffic Volume" by sourceAddress | sort 10 -"Total Incomming Traffic Volume"

 

but i want to convert showing the column result in Kilobytes / Megabytes / Gigabytes unit.

any suggestion?

BR

Amir

Labels (1)
0 Likes
1 Solution

Accepted Solutions
Acclaimed Contributor.. Shaun Acclaimed Contributor..
Acclaimed Contributor..

Re: Convert a Size Numerical Value in ArcSight Logger Sea...

Jump to solution

Have you tried using eval?

deviceProduct = "IP Flow" and sourceAddress IS NOT NULL | chart sum(bytesIn) AS BI by sourceAddress | eval KBI=BI/1000 | eval MBI=BI/1000000

View solution in original post

1 Reply
Acclaimed Contributor.. Shaun Acclaimed Contributor..
Acclaimed Contributor..

Re: Convert a Size Numerical Value in ArcSight Logger Sea...

Jump to solution

Have you tried using eval?

deviceProduct = "IP Flow" and sourceAddress IS NOT NULL | chart sum(bytesIn) AS BI by sourceAddress | eval KBI=BI/1000 | eval MBI=BI/1000000

View solution in original post

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.