https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365323#M161183 <PRE><CODE>index=your_index State="Active" earliest=@w6@d latest=@w6@d+7d | stats count </CODE></PRE> <P>Shows the count of all open tickets from previous Saturday until the end of Friday. <BR /> If you want to exclude friday, use latest=@w5@d+7d </P> Fri, 05 May 2017 17:29:28 GMT ckunath 2017-05-05T17:29:28Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365315#M161175 <P>Hello Guys,</P> <P>I have a requirement to show count of open tickets for every week. <BR /> Week should be between saturday to friday. So x-axis should contain points of every friday. So for every friday we should show the count of tickets raised from last saturday to this friday.</P> <P>Can anyone help me to achieve this?</P> <P>Many Thanks in advance.</P> Fri, 05 May 2017 16:26:27 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365315#M161175 Chinmai 2017-05-05T16:26:27Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365316#M161176 <P>I'm not completely understanding your question - do you what to have a timechart that always goes from last saturday to next friday with a bar that shows how many open tickets there are on that day, and how many there were on that weekday of the last week?</P> Fri, 05 May 2017 16:34:30 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365316#M161176 ckunath 2017-05-05T16:34:30Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365317#M161177 <P>see for example, today is friday, so for today(may 5) it should show the count of open tickets raised from last saturday(april 29) till today.</P> <P>Similarly, for april 28, the count should show the number of open tickets raised from april 22nd to april 28.</P> Fri, 05 May 2017 16:54:02 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365317#M161177 Chinmai 2017-05-05T16:54:02Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365318#M161178 <PRE><CODE>index=your_index earliest=-6d@d latest=now | timechart span=1d count(open_tickets) by date_wday </CODE></PRE> <P>This search should always show the count of open_tickets for each weekday in the last 7 days. </P> <P>Do you want to create a dashboard panel of it? Otherwise you could save this as report and let it run on every Friday night.</P> Fri, 05 May 2017 17:07:03 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365318#M161178 ckunath 2017-05-05T17:07:03Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365319#M161179 <P>this wont give me the weekly data as i wanted and i wanted it in a dashboard panel.</P> <P>see for example, today is friday, so for today(may 5) it should show the count of open tickets raised from last saturday(april 29) till today.</P> <P>Similarly, for april 28(last friday), the count should show the number of open tickets raised from april 22nd to april 28.</P> Fri, 05 May 2017 17:11:22 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365319#M161179 Chinmai 2017-05-05T17:11:22Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365320#M161180 <P>What does an event with an open ticket look like? Is it just the event being there or is there a certain field value to look out for?</P> Fri, 05 May 2017 17:15:06 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365320#M161180 ckunath 2017-05-05T17:15:06Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365321#M161181 <P>certain field value like State="Active", i can get the open tickets but i am finding difficulty to find tickets raised from every last saturday to this friday.</P> Fri, 05 May 2017 17:18:52 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365321#M161181 Chinmai 2017-05-05T17:18:52Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365322#M161182 <P>use this answer:<BR /> <A href="https://answers.splunk.com/answers/30430/previous-business-week-day.html">https://answers.splunk.com/answers/30430/previous-business-week-day.html</A><BR /> and this doc:<BR /> <A href="https://docs.splunk.com/Documentation/Splunk/6.6.0/Search/Specifytimemodifiersinyoursearch">https://docs.splunk.com/Documentation/Splunk/6.6.0/Search/Specifytimemodifiersinyoursearch</A></P> <P>describes it thoroughly</P> <P>hope it helps</P> Fri, 05 May 2017 17:21:36 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365322#M161182 adonio 2017-05-05T17:21:36Z https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365323#M161183 <PRE><CODE>index=your_index State="Active" earliest=@w6@d latest=@w6@d+7d | stats count </CODE></PRE> <P>Shows the count of all open tickets from previous Saturday until the end of Friday. <BR /> If you want to exclude friday, use latest=@w5@d+7d </P> Fri, 05 May 2017 17:29:28 GMT https://community.splunk.com/t5/Splunk-Search/how-to-get-weekly-data-and-week-should-be-between-saturday-to/m-p/365323#M161183 ckunath 2017-05-05T17:29:28Z