https://community.splunk.com/t5/Splunk-Search/Dashboard/m-p/528475#M149234 <P>Yes, i get the solution. Thanks for the help</P> Mon, 09 Nov 2020 04:45:38 GMT uagraw01 2020-11-09T04:45:38Z https://community.splunk.com/t5/Splunk-Search/Dashboard/m-p/528093#M149091 <P>&nbsp;</P><P> As Per below screenshot, i getting results the difference between last week host and this week host count. But i want list of the difference servers in splunk search. How can i retreive the list of all 23 servers which arr having diffrence from last week count to this week count.</P><P>&nbsp;</P><P>&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="IMG_20201105_162111.jpg" style="width: 4000px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/11660iA2BA2E62E424D12B/image-size/medium?v=v2&amp;px=400" role="button" title="IMG_20201105_162111.jpg" alt="IMG_20201105_162111.jpg" /></span></P><P> </P> Thu, 05 Nov 2020 10:54:58 GMT https://community.splunk.com/t5/Splunk-Search/Dashboard/m-p/528093#M149091 uagraw01 2020-11-05T10:54:58Z https://community.splunk.com/t5/Splunk-Search/Dashboard/m-p/528132#M149108 <P>Try using</P><LI-CODE lang="markup">| stats dc(host) as Total_host, values(host) as Hosts by Week_Status</LI-CODE><P>You'll also need to modify the <FONT face="courier new,courier">stats</FONT> commands that follow so they don't discard the Hosts field.</P><P>The last two lines of the query should be deleted because they add no value.</P> Thu, 05 Nov 2020 14:43:01 GMT https://community.splunk.com/t5/Splunk-Search/Dashboard/m-p/528132#M149108 richgalloway 2020-11-05T14:43:01Z https://community.splunk.com/t5/Splunk-Search/Dashboard/m-p/528475#M149234 <P>Yes, i get the solution. Thanks for the help</P> Mon, 09 Nov 2020 04:45:38 GMT https://community.splunk.com/t5/Splunk-Search/Dashboard/m-p/528475#M149234 uagraw01 2020-11-09T04:45:38Z