topic Re: Service now data calculated percentage of P1,P2,P3 but when ever there is no P1 or P2 or P3 tickets need to show as in Splunk Search

Service now data calculated percentage of P1,P2,P3 but when ever there is no P1 or P2 or P3 tickets need to show as NA

999balaji9 — Fri, 02 Jul 2021 07:42:07 GMT

Hi All,

I need help with the below requirement. I am getting data from the service now. I calculated the percentage date wise and showed like the results will be as shown below

DATE Severity Percentage

7/02/2021 P1 100

7/02/2021 P2 100

7/02/2021 P3 100

8/02/2021 P1 100

8/02/2021 P2 100

8/02/2021 P3 100

For the above results, I am good. But I would like to show whenever there is no values P1 or P2 or P3 I would like to display as NA

Kindly help me

Thanks & Regards,
Balaji

Re: Service now data calculated percentage of P1,P2,P3 but when ever there is no P1 or P2 or P3 tickets need to show as

venkatasri — Fri, 02 Jul 2021 07:47:23 GMT

@999balaji9 Can you share the original query written to produce the output?

Re: Service now data calculated percentage of P1,P2,P3 but when ever there is no P1 or P2 or P3 tickets need to show as

venkatasri — Fri, 02 Jul 2021 08:07:14 GMT

@999balaji9 As i see your query you won't get empty/null entries for severity, are you getting empty that you want to change it NA?

(or) any given day if there are no incidents then you still want to display the date and set Severity = NA?

Re: Service now data calculated percentage of P1,P2,P3 but when ever there is no P1 or P2 or P3 tickets need to show as

999balaji9 — Fri, 02 Jul 2021 09:11:48 GMT

if the values are in severity are showing as P1, P2, Or P3 then I could able to resolve it. But in the current scenario some time I am getting P3 only for one date for the remaining two I need to showcase as P1 value as NA and P2 value as NA