https://community.splunk.com/t5/Splunk-Search/Event-count-before-and-after-a-specified-time/m-p/528828#M149315 <LI-CODE lang="markup">| stats count(eval(date_hour&lt;8)) as "Events before 8am" count(eval(date_hour&gt;=8)) as "Events after 8am"</LI-CODE> Tue, 10 Nov 2020 13:25:54 GMT ITWhisperer 2020-11-10T13:25:54Z https://community.splunk.com/t5/Splunk-Search/Event-count-before-and-after-a-specified-time/m-p/528822#M149314 <P>I am looking to count the number of events that occur before and after a specified time (8am) each day to give a table like for example:</P><TABLE border="1" width="100%"><TBODY><TR><TD width="50%">Events before 8am</TD><TD width="50%">Events after 8am</TD></TR><TR><TD width="50%">400</TD><TD width="50%">50</TD></TR></TBODY></TABLE><P>&nbsp;</P><P>Any help greatly appreciated?</P> Tue, 10 Nov 2020 12:51:27 GMT https://community.splunk.com/t5/Splunk-Search/Event-count-before-and-after-a-specified-time/m-p/528822#M149314 jboustead 2020-11-10T12:51:27Z https://community.splunk.com/t5/Splunk-Search/Event-count-before-and-after-a-specified-time/m-p/528828#M149315 <LI-CODE lang="markup">| stats count(eval(date_hour&lt;8)) as "Events before 8am" count(eval(date_hour&gt;=8)) as "Events after 8am"</LI-CODE> Tue, 10 Nov 2020 13:25:54 GMT https://community.splunk.com/t5/Splunk-Search/Event-count-before-and-after-a-specified-time/m-p/528828#M149315 ITWhisperer 2020-11-10T13:25:54Z