<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic How to compare data between two business weeks using time chart excluding weekends? in Splunk Search</title>
    <link>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646430#M223745</link>
    <description>&lt;P&gt;Hello Team,&lt;/P&gt;
&lt;P&gt;Could you please suggest on how to create an overlapping graph which compares this week's data and previous week's data excluding weekends.&lt;BR /&gt;&lt;BR /&gt;Any help is very much appreciated.&lt;/P&gt;
&lt;P&gt;My base search is very simple.&lt;BR /&gt;index=my index source=/.log '#search string#'&lt;BR /&gt;| time chart span=1h count(_raw) by host&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 09 Jun 2023 12:21:47 GMT</pubDate>
    <dc:creator>Devi13</dc:creator>
    <dc:date>2023-06-09T12:21:47Z</dc:date>
    <item>
      <title>How to compare data between two business weeks using time chart excluding weekends?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646430#M223745</link>
      <description>&lt;P&gt;Hello Team,&lt;/P&gt;
&lt;P&gt;Could you please suggest on how to create an overlapping graph which compares this week's data and previous week's data excluding weekends.&lt;BR /&gt;&lt;BR /&gt;Any help is very much appreciated.&lt;/P&gt;
&lt;P&gt;My base search is very simple.&lt;BR /&gt;index=my index source=/.log '#search string#'&lt;BR /&gt;| time chart span=1h count(_raw) by host&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 09 Jun 2023 12:21:47 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646430#M223745</guid>
      <dc:creator>Devi13</dc:creator>
      <dc:date>2023-06-09T12:21:47Z</dc:date>
    </item>
    <item>
      <title>Re: How to compare data between two business weeks using time chart excluding weekends?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646502#M223769</link>
      <description>&lt;LI-CODE lang="markup"&gt;| eval day= strftime(_time,"%w")
| where day &amp;gt; 0 AND day &amp;lt; 6
| timechart span=1h count by host
| timewrap 1w align=end&lt;/LI-CODE&gt;</description>
      <pubDate>Sat, 10 Jun 2023 11:10:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646502#M223769</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-06-10T11:10:20Z</dc:date>
    </item>
    <item>
      <title>Re: How to compare data between two business weeks using time chart excluding weekends?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646504#M223771</link>
      <description>&lt;P&gt;Hello,&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thank you so so much , it works like a charm.&lt;/P&gt;&lt;P&gt;But I still get weekends in the results, is there a way to exclude them?&lt;/P&gt;</description>
      <pubDate>Sat, 10 Jun 2023 13:07:37 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646504#M223771</guid>
      <dc:creator>Devi13</dc:creator>
      <dc:date>2023-06-10T13:07:37Z</dc:date>
    </item>
    <item>
      <title>Re: How to compare data between two business weeks using time chart excluding weekends?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646505#M223772</link>
      <description>&lt;P&gt;Repeat the first two lines - timechart adds the times back in, but the good thing about it is that if there are any hours without any events, you still get zeroes for those hours. If you use chart or stats instead, the times without events don't appear at all.&lt;/P&gt;</description>
      <pubDate>Sat, 10 Jun 2023 13:49:39 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646505#M223772</guid>
      <dc:creator>ITWhisperer</dc:creator>
      <dc:date>2023-06-10T13:49:39Z</dc:date>
    </item>
    <item>
      <title>Re: How to compare data between two business weeks using time chart excluding weekends?</title>
      <link>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646506#M223773</link>
      <description>&lt;P&gt;Greatt! Thank you so muchh for your help &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Sat, 10 Jun 2023 15:42:45 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Splunk-Search/How-to-compare-data-between-two-business-weeks-using-time-chart/m-p/646506#M223773</guid>
      <dc:creator>Devi13</dc:creator>
      <dc:date>2023-06-10T15:42:45Z</dc:date>
    </item>
  </channel>
</rss>

