https://community.splunk.com/t5/Splunk-Dev/Running-search-calculation/m-p/559813#M9983 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="smanojkumar_1-1626444269426.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15124i30F1F386440C80F4/image-size/medium?v=v2&amp;px=400" role="button" title="smanojkumar_1-1626444269426.png" alt="smanojkumar_1-1626444269426.png" /></span></P><P>The calculation has to be made on Team Availability, taking a value of 96000 reduces the current Time Required&nbsp; value and display in the next row in&nbsp;Team Availability, the recent&nbsp;Team Availability value must be taken for next subtraction with&nbsp;Time Required can be displayed&nbsp; in the next row in&nbsp;Team Availability, so it continues for all Time Required valued.</P><P>The last image is the expected one,</P><P>Help me to rectify my doubt and share the query</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="smanojkumar_2-1626444735557.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15125iB594321523F2042F/image-size/medium?v=v2&amp;px=400" role="button" title="smanojkumar_2-1626444735557.png" alt="smanojkumar_2-1626444735557.png" /></span></P><P>&nbsp;</P> Fri, 16 Jul 2021 14:19:19 GMT smanojkumar 2021-07-16T14:19:19Z https://community.splunk.com/t5/Splunk-Dev/Running-search-calculation/m-p/559813#M9983 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="smanojkumar_1-1626444269426.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15124i30F1F386440C80F4/image-size/medium?v=v2&amp;px=400" role="button" title="smanojkumar_1-1626444269426.png" alt="smanojkumar_1-1626444269426.png" /></span></P><P>The calculation has to be made on Team Availability, taking a value of 96000 reduces the current Time Required&nbsp; value and display in the next row in&nbsp;Team Availability, the recent&nbsp;Team Availability value must be taken for next subtraction with&nbsp;Time Required can be displayed&nbsp; in the next row in&nbsp;Team Availability, so it continues for all Time Required valued.</P><P>The last image is the expected one,</P><P>Help me to rectify my doubt and share the query</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="smanojkumar_2-1626444735557.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/15125iB594321523F2042F/image-size/medium?v=v2&amp;px=400" role="button" title="smanojkumar_2-1626444735557.png" alt="smanojkumar_2-1626444735557.png" /></span></P><P>&nbsp;</P> Fri, 16 Jul 2021 14:19:19 GMT https://community.splunk.com/t5/Splunk-Dev/Running-search-calculation/m-p/559813#M9983 smanojkumar 2021-07-16T14:19:19Z https://community.splunk.com/t5/Splunk-Dev/Running-search-calculation/m-p/559821#M9984 <LI-CODE lang="markup">| streamstats last(TimeRequired) as previousTimeUsed window=2 current=f | streamstats sum(previousTimeUsed) as cumulativeUsage | fillnull value=0 cumulativeUsage | eval TeamAvailability=96000-cumulativeUsage</LI-CODE> Fri, 16 Jul 2021 14:50:59 GMT https://community.splunk.com/t5/Splunk-Dev/Running-search-calculation/m-p/559821#M9984 ITWhisperer 2021-07-16T14:50:59Z https://community.splunk.com/t5/Splunk-Dev/Running-search-calculation/m-p/559920#M9985 <P>It works, Thanks</P> Sat, 17 Jul 2021 17:21:24 GMT https://community.splunk.com/t5/Splunk-Dev/Running-search-calculation/m-p/559920#M9985 smanojkumar 2021-07-17T17:21:24Z