<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to group multiple machines and user session time into a readable chart in Getting Data In</title>
    <link>https://community.splunk.com/t5/Getting-Data-In/How-to-group-multiple-machines-and-user-session-time-into-a/m-p/491715#M84007</link>
    <description>&lt;P&gt;Hi all!&lt;/P&gt;

&lt;P&gt;I am currently working on a dashboard metrics project that involves me attempting to create a dashboard panel that outputs the total number of hours / time spent on a set number of machines. In short, I need to:&lt;/P&gt;

&lt;OL&gt;
&lt;LI&gt;Group together a list of machines&lt;/LI&gt;
&lt;LI&gt;Calculate the total number of hours users are spending on said machine. &lt;/LI&gt;
&lt;/OL&gt;

&lt;P&gt;Here is what I am currently able to do:&lt;/P&gt;

&lt;P&gt;I have created a search function that properly calculates the usage of each machine via log on/log offs. The information is broken down via the machine name, user, time logged in, time logged out, and total duration of each user's session in a single machine. &lt;/P&gt;

&lt;P&gt;I hit a mental block on how to convert the total duration / time of each session and machine into a single readable format. &lt;/P&gt;

&lt;P&gt;Thank you all in advance!&lt;/P&gt;</description>
    <pubDate>Fri, 13 Mar 2020 13:52:41 GMT</pubDate>
    <dc:creator>earonwilliams12</dc:creator>
    <dc:date>2020-03-13T13:52:41Z</dc:date>
    <item>
      <title>How to group multiple machines and user session time into a readable chart</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-group-multiple-machines-and-user-session-time-into-a/m-p/491715#M84007</link>
      <description>&lt;P&gt;Hi all!&lt;/P&gt;

&lt;P&gt;I am currently working on a dashboard metrics project that involves me attempting to create a dashboard panel that outputs the total number of hours / time spent on a set number of machines. In short, I need to:&lt;/P&gt;

&lt;OL&gt;
&lt;LI&gt;Group together a list of machines&lt;/LI&gt;
&lt;LI&gt;Calculate the total number of hours users are spending on said machine. &lt;/LI&gt;
&lt;/OL&gt;

&lt;P&gt;Here is what I am currently able to do:&lt;/P&gt;

&lt;P&gt;I have created a search function that properly calculates the usage of each machine via log on/log offs. The information is broken down via the machine name, user, time logged in, time logged out, and total duration of each user's session in a single machine. &lt;/P&gt;

&lt;P&gt;I hit a mental block on how to convert the total duration / time of each session and machine into a single readable format. &lt;/P&gt;

&lt;P&gt;Thank you all in advance!&lt;/P&gt;</description>
      <pubDate>Fri, 13 Mar 2020 13:52:41 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-group-multiple-machines-and-user-session-time-into-a/m-p/491715#M84007</guid>
      <dc:creator>earonwilliams12</dc:creator>
      <dc:date>2020-03-13T13:52:41Z</dc:date>
    </item>
    <item>
      <title>Re: How to group multiple machines and user session time into a readable chart</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-group-multiple-machines-and-user-session-time-into-a/m-p/491716#M84008</link>
      <description>&lt;P&gt;Hi!&lt;/P&gt;

&lt;P&gt;use tostring(X, "duration") in your own query:&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;| makeresults limit=1 | eval foo=303030 | eval duration=tostring(foo,"duration")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 13 Mar 2020 15:08:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-group-multiple-machines-and-user-session-time-into-a/m-p/491716#M84008</guid>
      <dc:creator>jpalacian</dc:creator>
      <dc:date>2020-03-13T15:08:19Z</dc:date>
    </item>
    <item>
      <title>Re: How to group multiple machines and user session time into a readable chart</title>
      <link>https://community.splunk.com/t5/Getting-Data-In/How-to-group-multiple-machines-and-user-session-time-into-a/m-p/491717#M84009</link>
      <description>&lt;P&gt;Can you provide some samples of total duration / time and expected output?&lt;/P&gt;</description>
      <pubDate>Fri, 13 Mar 2020 16:22:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Getting-Data-In/How-to-group-multiple-machines-and-user-session-time-into-a/m-p/491717#M84009</guid>
      <dc:creator>manjunathmeti</dc:creator>
      <dc:date>2020-03-13T16:22:53Z</dc:date>
    </item>
  </channel>
</rss>

