<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Graph log attendancy in Dashboards &amp; Visualizations</title>
    <link>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166965#M10267</link>
    <description>&lt;P&gt;How could i convert 28800 in 08:00 am ?&lt;/P&gt;</description>
    <pubDate>Fri, 16 May 2014 16:47:20 GMT</pubDate>
    <dc:creator>danisam</dc:creator>
    <dc:date>2014-05-16T16:47:20Z</dc:date>
    <item>
      <title>Graph log attendancy</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166962#M10264</link>
      <description>&lt;P&gt;i am going to try to chart the day time check attendance of our employee over the last week. &lt;BR /&gt;
For example  i am amble to have this table by week days   : &lt;/P&gt;

&lt;P&gt;index="asistencia" No=5 earliest=-7d@w0 latest=@w7 | eval myHour=strftime(_time, "%H") | Where (myHour &amp;gt;= 1) | stats values(Date) as entrada by date_mday Name | sort date_mday&lt;/P&gt;

&lt;P&gt;1   5   Jonathan    05/05/2014 02:02:47 p.m. &lt;BR /&gt;
                                05/05/2014 06:19:58 p.m.&lt;/P&gt;

&lt;P&gt;2   6   Jonathan        06/05/2014 05:54:03 p.m.&lt;BR /&gt;
06/05/2014 08:30:05 a.m.&lt;/P&gt;

&lt;P&gt;3   7   Jonathan    07/05/2014 06:04:21 p.m.&lt;BR /&gt;
07/05/2014 08:38:07 a.m.&lt;/P&gt;

&lt;P&gt;4   8   Jonathan    08/05/2014 06:59:31 p.m.&lt;BR /&gt;
08/05/2014 08:16:02 a.m.&lt;/P&gt;

&lt;P&gt;5   9   Jonathan    09/05/2014 06:08:43 p.m.&lt;BR /&gt;
09/05/2014 08:12:51 a.m. &lt;/P&gt;

&lt;P&gt;Dont know how to graph this table for all the employees having plotting the arrival time and the end day time , also we want to be able to plot 2 lines in the chart showing the normal entrance time and end of the day time.&lt;/P&gt;

&lt;P&gt;Thanks for your help.&lt;/P&gt;

&lt;P&gt;Regards&lt;/P&gt;

&lt;P&gt;Daniel &lt;/P&gt;</description>
      <pubDate>Mon, 28 Sep 2020 16:38:14 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166962#M10264</guid>
      <dc:creator>danisam</dc:creator>
      <dc:date>2020-09-28T16:38:14Z</dc:date>
    </item>
    <item>
      <title>Re: Graph log attendancy</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166963#M10265</link>
      <description>&lt;P&gt;Try something like this: &lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index="asistencia" earliest=-7d@w0 latest=@w7 | eval myHour=strftime(_time, "%H") | Where (myHour &amp;gt;= 1) | eval Date=_time | bucket span=1d _time | eval Date=Date- _time| chart min(Date) as EntryTime max(Date) as ExitTime min(NormalEntryTime) as NormalEntryTime min(NormalExitTime) as NormalExitTime by _time Name | sort _time | eval NormalEntryTime=28800 | eval NormalExitTime=61200
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;&lt;STRONG&gt;Updated: shows duration as decimal no ("hour.minute")&lt;/STRONG&gt;&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;index="asistencia"  earliest=-7d@w0 latest=@w7 | eval myHour=strftime(_time, "%H") | Where (myHour &amp;gt;= 1) | eval Date=_time | bucket span=1d _time | eval Date=strftime(Date,"%H.%M") | chart first(Date) as EntryTime last(Date) as ExitTime min(NormalEntryTime) as NormalEntryTime min(NormalExitTime) as NormalExitTime by _time Name | sort _time | eval NormalEntryTime="8.00" | eval NormalExitTime="17.30" | eval _time=strftime(_time,"%Y-%m-%d")
&lt;/CODE&gt;&lt;/PRE&gt;</description>
      <pubDate>Fri, 16 May 2014 16:08:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166963#M10265</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-05-16T16:08:45Z</dc:date>
    </item>
    <item>
      <title>Re: Graph log attendancy</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166964#M10266</link>
      <description>&lt;P&gt;Great,it's show exactly what i want , but how could i have the time showing like 09:00 , 19:00. ?&lt;/P&gt;</description>
      <pubDate>Fri, 16 May 2014 16:22:18 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166964#M10266</guid>
      <dc:creator>danisam</dc:creator>
      <dc:date>2014-05-16T16:22:18Z</dc:date>
    </item>
    <item>
      <title>Re: Graph log attendancy</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166965#M10267</link>
      <description>&lt;P&gt;How could i convert 28800 in 08:00 am ?&lt;/P&gt;</description>
      <pubDate>Fri, 16 May 2014 16:47:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166965#M10267</guid>
      <dc:creator>danisam</dc:creator>
      <dc:date>2014-05-16T16:47:20Z</dc:date>
    </item>
    <item>
      <title>Re: Graph log attendancy</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166966#M10268</link>
      <description>&lt;P&gt;Yeah... That's the problem with visualizations. you need to have a numerica value to plot them in chart (y-axis). The best formatting which may be possible would be show as decimal no like 9.00, 17.30 etc.&lt;/P&gt;</description>
      <pubDate>Fri, 16 May 2014 17:45:34 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166966#M10268</guid>
      <dc:creator>somesoni2</dc:creator>
      <dc:date>2014-05-16T17:45:34Z</dc:date>
    </item>
    <item>
      <title>Re: Graph log attendancy</title>
      <link>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166967#M10269</link>
      <description>&lt;P&gt;Thats perfect for me , thanks you a lot.&lt;/P&gt;</description>
      <pubDate>Fri, 16 May 2014 22:07:42 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Dashboards-Visualizations/Graph-log-attendancy/m-p/166967#M10269</guid>
      <dc:creator>danisam</dc:creator>
      <dc:date>2014-05-16T22:07:42Z</dc:date>
    </item>
  </channel>
</rss>

