topic How can I show the total count as well as completed count? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-can-I-show-the-total-count-as-well-as-completed-count/m-p/304682#M91580 <P>If I have to show that 8 out of 10 tickets have been closed how can I best show this? I need to show the total count as well as completed count</P> Thu, 22 Feb 2018 14:18:01 GMT akshaypillai 2018-02-22T14:18:01Z How can I show the total count as well as completed count? https://community.splunk.com/t5/Splunk-Search/How-can-I-show-the-total-count-as-well-as-completed-count/m-p/304682#M91580 <P>If I have to show that 8 out of 10 tickets have been closed how can I best show this? I need to show the total count as well as completed count</P> Thu, 22 Feb 2018 14:18:01 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-show-the-total-count-as-well-as-completed-count/m-p/304682#M91580 akshaypillai 2018-02-22T14:18:01Z Re: How can I show the total count as well as completed count? https://community.splunk.com/t5/Splunk-Search/How-can-I-show-the-total-count-as-well-as-completed-count/m-p/304683#M91581 <P>One way to visually represent this would be to create a statistics table like this (with the percentage column optional, but nice to have):</P> <PRE><CODE>Tickets Closed | Total Tickets | Percentage Closed 8 | 10 | 80% </CODE></PRE> <P>Alternately, you could make a dashboard with two <CODE>single</CODE> items (or three, if you wanted the percentage), one for each value. And another way that would make sense to present that data would be a pie chart.</P> Thu, 22 Feb 2018 17:53:16 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-show-the-total-count-as-well-as-completed-count/m-p/304683#M91581 elliotproebstel 2018-02-22T17:53:16Z Re: How can I show the total count as well as completed count? https://community.splunk.com/t5/Splunk-Search/How-can-I-show-the-total-count-as-well-as-completed-count/m-p/304684#M91582 <P>This should get you started. You'll likely need to change the <CODE>eval</CODE> expression to whatever indicates a closed ticket.</P> <PRE><CODE>&lt;your base search for all tickets&gt; | stats count(eval(status=Closed)) as closed, count as total | eval "Percentage Closed"=(closed*100)/total | rename closed as "Tickets Closed", total as "Total Tickets" | table "Tickets Closed" "Total Tickets" "Percentage Closed" </CODE></PRE> Thu, 22 Feb 2018 18:14:25 GMT https://community.splunk.com/t5/Splunk-Search/How-can-I-show-the-total-count-as-well-as-completed-count/m-p/304684#M91582 richgalloway 2018-02-22T18:14:25Z