topic Re: Splukquery in Splunk Search

How to calculate pending ticket count?

pavan_kumar — Mon, 10 Apr 2023 17:12:32 GMT

Hi,

I was created 2 dashboards for pending tickets and completed tickets. when pending tickets are completed, need to decrease the count in the pending tickets. Any help on this Thanks in advance.

When I have closed the tickets the completed count was increasing, but the pending count is not decreasing. please help on this.

Thanks & Regards

Re: Splukquery

gcusello — Mon, 10 Apr 2023 06:45:52 GMT

Hi @pavan_kumar,

are you speaking of two differen dashboards or two panels of the same dashboard?

Anyway, you could schedule a frequent refresh your panels so the data are frequently updated.

Could you share your searches or the code of your dashboard?

Ciao.

Giuseppe

Re: Splukquery

pavan_kumar — Mon, 24 Apr 2023 08:55:31 GMT

Hi @gcusello , Thanks for your response.

2 panels in same dashboard

index="cloud" (assigne="pavan-001" OR assigne="pavan-002" OR assigne="pavan-003") (task_name="linux_install" OR task_name="linux_uninstall" OR task_name="windows_install" OR task_name="linux_uninstall") | table _time,pipeline_id,env,assignee,task_name,status | dedup table _time,pipeline_id,env,assignee,task_name,status

In the above query

panel-1: it is for pending tickets which status is "pending"

panel-2: it is for completed tickets which status is "completed"

My issue is: when ticket raised by user it is added to "pending " panel automatically, when the ticket status was changed to "complete" the count need to decrease in "pending" panel and need to increase count to "complete" panel.

Re: Splukquery

gcusello — Mon, 24 Apr 2023 09:22:36 GMT

Hi @pavan_kumar,

panels cannot be automatically refreshed when the data is changed, but you can configure a refresh frequency for you panels (e.g. every 5 minutes) to have a situation updated to the last 5 minutes.

you could also add this information in the subtitle so the users know at what time the situation is updated.

If you have many users that need an updates situation, you could schedule a report, updated e.g. every 5 minutes and in the panels you could display the updated report every 5 minutes.

Ciao.

Giuseppe

Re: Splukquery

pavan_kumar — Mon, 24 Apr 2023 09:50:46 GMT

My issue is need to decrease count in "pending" panel count dynamically, after close the ticket.

Re: Splukquery

gcusello — Mon, 24 Apr 2023 15:34:58 GMT

Hi @pavan_kumar,

as I said, panels cannot be automatically refreshed when the data is changed, but you can configure a refresh frequency for you panels (e.g. every 5 minutes or lower) to have an updated .

Ciao.

Giuseppe