topic Re: generate a graph where the x -axis represent number of times the ticket was assigned and Y-axis represent number of tickets in Splunk Search https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351848#M104141 <P>Or this (will be efficient than using eventstats)</P> <PRE><CODE>your base search | stats count by NumTimes by ticketId | stats count as Ticket_Numbers by NumTimes </CODE></PRE> Tue, 13 Jun 2017 16:29:14 GMT somesoni2 2017-06-13T16:29:14Z generate a graph where the x -axis represent number of times the ticket was assigned and Y-axis represent number of tickets https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351846#M104139 <P>Hello all ,</P> <P>I need your help as i have list of tickets called "Tickets" and i would like to generate a graph where the x -axis represent number of times the ticket was assigned and Y-axis represent number of tickets <BR /> for Ex :<BR /> Tickets <BR /> AB111<BR /> AB111<BR /> AB122<BR /> AB910<BR /> AB122</P> <P>so i would like to get the below results </P> <P>Number of times Tickets_numbers<BR /> 1 1<BR /> 2 2<BR /> 3 0</P> <P>which illustrate that only one ticket was assigned one time however we had 2 tickets that was assigned two times and no tickets was assigned three times </P> <P>Thanks</P> Tue, 13 Jun 2017 09:33:51 GMT https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351846#M104139 wessam 2017-06-13T09:33:51Z Re: generate a graph where the x -axis represent number of times the ticket was assigned and Y-axis represent number of tickets https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351847#M104140 <P>this gave me similar results:</P> <PRE><CODE>|makeresults|eval ticketId="AB111,AB111,AB122,AB910,AB122"|makemv ticketId delim=","|mvexpand ticketId|eventstats count by ticketId|stats dc(ticketId) by count </CODE></PRE> <P>so try something like:</P> <PRE><CODE>|eventstats count as NumTimes by ticketId|stats dc(ticketId) as Ticket_Numbers by NumTimes </CODE></PRE> Tue, 13 Jun 2017 15:48:25 GMT https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351847#M104140 cmerriman 2017-06-13T15:48:25Z Re: generate a graph where the x -axis represent number of times the ticket was assigned and Y-axis represent number of tickets https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351848#M104141 <P>Or this (will be efficient than using eventstats)</P> <PRE><CODE>your base search | stats count by NumTimes by ticketId | stats count as Ticket_Numbers by NumTimes </CODE></PRE> Tue, 13 Jun 2017 16:29:14 GMT https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351848#M104141 somesoni2 2017-06-13T16:29:14Z Re: generate a graph where the x -axis represent number of times the ticket was assigned and Y-axis represent number of tickets https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351849#M104142 <P>edit:</P> <PRE><CODE>|stats count as NumTimes by ticketId|stats count as Ticket_Numbers by NumTimes </CODE></PRE> Tue, 13 Jun 2017 17:46:40 GMT https://community.splunk.com/t5/Splunk-Search/generate-a-graph-where-the-x-axis-represent-number-of-times-the/m-p/351849#M104142 cmerriman 2017-06-13T17:46:40Z