<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: How to format table for resolved record after comparing  two timestamp in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415555#M119611</link>
    <description>&lt;P&gt;@ninadbhaskarwar what is the criteria for identifying fixed?&lt;/P&gt;</description>
    <pubDate>Fri, 07 Jun 2019 18:09:22 GMT</pubDate>
    <dc:creator>niketn</dc:creator>
    <dc:date>2019-06-07T18:09:22Z</dc:date>
    <item>
      <title>How to format table for resolved record after comparing  two timestamp</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415554#M119610</link>
      <description>&lt;P&gt;Hi Friends,&lt;/P&gt;

&lt;P&gt;My data set as below&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;ID    Date
1      01/01/2010
1      01/02/2010
2      01/01/2010
3      01/01/2010
3      01/02/2010
1      01/03/2010
4      01/02/2010
4      01/03/2010
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Looking for the table with the data&lt;/P&gt;

&lt;PRE&gt;&lt;CODE&gt;Date           Count    Fixed
01/01/2010     3        1
01/02/2010     3        1
01/03/2010     2        0  
&lt;/CODE&gt;&lt;/PRE&gt;

&lt;P&gt;Regards.&lt;/P&gt;</description>
      <pubDate>Fri, 07 Jun 2019 17:30:02 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415554#M119610</guid>
      <dc:creator>ninadbhaskarwar</dc:creator>
      <dc:date>2019-06-07T17:30:02Z</dc:date>
    </item>
    <item>
      <title>Re: How to format table for resolved record after comparing  two timestamp</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415555#M119611</link>
      <description>&lt;P&gt;@ninadbhaskarwar what is the criteria for identifying fixed?&lt;/P&gt;</description>
      <pubDate>Fri, 07 Jun 2019 18:09:22 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415555#M119611</guid>
      <dc:creator>niketn</dc:creator>
      <dc:date>2019-06-07T18:09:22Z</dc:date>
    </item>
    <item>
      <title>Re: How to format table for resolved record after comparing  two timestamp</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415556#M119612</link>
      <description>&lt;P&gt;what is column Fixed here?&lt;/P&gt;</description>
      <pubDate>Fri, 07 Jun 2019 18:13:29 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415556#M119612</guid>
      <dc:creator>Vijeta</dc:creator>
      <dc:date>2019-06-07T18:13:29Z</dc:date>
    </item>
    <item>
      <title>Re: How to format table for resolved record after comparing  two timestamp</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415557#M119613</link>
      <description>&lt;P&gt;If the id is not available in the next date then that record has been fixed. &lt;/P&gt;</description>
      <pubDate>Fri, 07 Jun 2019 18:17:40 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415557#M119613</guid>
      <dc:creator>ninadbhaskarwar</dc:creator>
      <dc:date>2019-06-07T18:17:40Z</dc:date>
    </item>
    <item>
      <title>Re: How to format table for resolved record after comparing  two timestamp</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415558#M119614</link>
      <description>&lt;P&gt;@vijeta - When record get closed earlier date then it will not be visible on next date so If the id is not available in the next date then that record has been considered to be fixed.&lt;/P&gt;</description>
      <pubDate>Fri, 07 Jun 2019 18:40:17 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-format-table-for-resolved-record-after-comparing-two/m-p/415558#M119614</guid>
      <dc:creator>ninadbhaskarwar</dc:creator>
      <dc:date>2019-06-07T18:40:17Z</dc:date>
    </item>
  </channel>
</rss>

