All Apps and Add-ons

How to give Ranks to the employees based on the points

yu94
New Member

Hi All,

Basically what I'm trying to do here is there will a data as below
This is the sample data(The real data may be any numbers and the employees also any nymbers)
Employee1 Points Rank
Ram 1100 1

Girish 570 2
Mahesh 500 3
Lalith 500 3
Tanvie 200 4
Raj 100 5
Vishal 100 5
Yogee 100 5

so I want to write a splunk search to give the Ranks to the employees based on the Points.
Can you please help me to write this splunk search?

Regards,
Thippesh

0 Karma
1 Solution

dineshraj9
Builder

Do it this way -

< your search > | streamstats current=f window=1 last(Points) as prevPoints | fillnull value=0 prevPoints | eval tempRank=if(Points=prevPoints,0,1)  | streamstats sum(tempRank) as Rank | table Employee1 Points Rank

View solution in original post

0 Karma

dineshraj9
Builder

Do it this way -

< your search > | streamstats current=f window=1 last(Points) as prevPoints | fillnull value=0 prevPoints | eval tempRank=if(Points=prevPoints,0,1)  | streamstats sum(tempRank) as Rank | table Employee1 Points Rank
0 Karma

yu94
New Member

Thanks Dinesh... it worked as expected.

0 Karma
Get Updates on the Splunk Community!

Adoption of RUM and APM at Splunk

    Unleash the power of Splunk Observability   Watch Now In this can't miss Tech Talk! The Splunk Growth ...

March Community Office Hours Security Series Uncovered!

Hello Splunk Community! In March, Splunk Community Office Hours spotlighted our fabulous Splunk Threat ...

Stay Connected: Your Guide to April Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars in April. This post ...