topic Calculate weekdays assuming Saturday as 1/2 day in Getting Data In

Calculate weekdays assuming Saturday as 1/2 day

changux — Thu, 08 Sep 2016 12:01:32 GMT

Hi.
I want to calculate the weekdays in a month, using this:

| gentimes start=11/01/16 end=11/31/16 | search starthuman!="Sun*" starthuman!="Sat*" | stats count

My problem is that i need to count the saturdays as 1/2 day, for example: Without Sat/Sun, July has 21 weekdays. July has 4 saturdays, so i must add 0.5 * 4, then, the total count is 23. How i can do this?

Any help please?

Thanks!

Re: Calculate weekdays assuming Saturday as 1/2 day

PPape — Thu, 08 Sep 2016 12:12:07 GMT

This should work

| gentimes start=11/01/16 end=11/31/16  | search starthuman!="Sun*" |rex field=starthuman "^(?<day>\C{3}).*" | eval daycount = if(day=="Sat",0.5,1) | stats sum(daycount)

Re: Calculate weekdays assuming Saturday as 1/2 day

sundareshr — Thu, 08 Sep 2016 12:12:52 GMT

Try this

| gentimes start=11/01/16 end=11/31/16 | eval dow=strftime(starttime, "%w")  | stats count(eval(dow>0 AND dow<6)) as weekday count(eval(dow=6)) as sat | eval weekdays=weekday+(sat/2)

*UPDATED*

| makeresults | eval start=relative_time(now(), "@mon") | eval end=relative_time(now(), "+1mon@mon-1d") | eval mon=mvrange(start, end, "1d") | mvexpand mon | eval dow=strftime(mon, "%-w") | stats count(eval(dow>0 AND dow<6)) as weekday count(eval(dow=6)) as sat | eval weekdays=weekday+(sat/2)

Re: Calculate weekdays assuming Saturday as 1/2 day

changux — Thu, 08 Sep 2016 12:18:39 GMT

Awesome! Some way to do to the current month and delete start/end dates?

Re: Calculate weekdays assuming Saturday as 1/2 day

changux — Thu, 08 Sep 2016 12:18:45 GMT

Awesome! Some way to do to the current month and delete start/end dates?

Re: Calculate weekdays assuming Saturday as 1/2 day

sundareshr — Thu, 08 Sep 2016 12:34:30 GMT

Try updated answer

Re: Calculate weekdays assuming Saturday as 1/2 day

PPape — Thu, 08 Sep 2016 12:42:55 GMT

try @sundareshr updated answer 🙂 this is really great

Re: Calculate weekdays assuming Saturday as 1/2 day

changux — Thu, 08 Sep 2016 12:58:07 GMT

Last question: i created a search macro with this and when i ran, splunk returns:

Error in 'makeresults' command: This
command must be the first command of a
search.

Any idea?

Re: Calculate weekdays assuming Saturday as 1/2 day

PPape — Thu, 08 Sep 2016 12:59:45 GMT

can you show us where you use the macro?

Re: Calculate weekdays assuming Saturday as 1/2 day

changux — Thu, 08 Sep 2016 13:02:46 GMT

After created, i try to call in the search bar: workdayswithsat

With ` begin/end

Re: Calculate weekdays assuming Saturday as 1/2 day

sundareshr — Thu, 08 Sep 2016 14:54:18 GMT

You probably don't need |makeresults. Try without it.