Reporting

Can I add a filter or somehow manage my Report by month?

kennethtran
New Member

I have a Population extract of all employees but want to create a report or only extract the ones that were hired in a certain month e.g. getting a report of all employees hired during the month of March. Can I input a filter or something on a report?

Tags (1)
0 Karma
1 Solution

adonio
Ultra Champion

try something like this:

... search that creates your report ... 
| eval month_year_of_hire = strftime(strptime(hire_date,"%m/%d/%Y"),"%m-%Y")
| eval full_name = first_name." ".last_name
| stats values(full_name) as employees by month_year_of_hire
| where month_year_of_hire = "Whatever you need here"

please note that you will probably need to modify the fields name i chose randomly to match your field names

View solution in original post

0 Karma

adonio
Ultra Champion

try something like this:

... search that creates your report ... 
| eval month_year_of_hire = strftime(strptime(hire_date,"%m/%d/%Y"),"%m-%Y")
| eval full_name = first_name." ".last_name
| stats values(full_name) as employees by month_year_of_hire
| where month_year_of_hire = "Whatever you need here"

please note that you will probably need to modify the fields name i chose randomly to match your field names

0 Karma

adonio
Ultra Champion

how does your data looks like?

0 Karma

kennethtran
New Member

My current report of employees has all the first name, last name, work place, managers, ID, emails, and hire date, etc. if that helps.

0 Karma

adonio
Ultra Champion

what is the format of the hire data?

0 Karma

kennethtran
New Member

It is written like this 04/24/2019 for April 24th and so on.

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

Can’t Make It to Boston? Stream .conf25 and Learn with Haya Husain

Boston may be buzzing this September with Splunk University and .conf25, but you don’t have to pack a bag to ...

Splunk Lantern’s Guide to The Most Popular .conf25 Sessions

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Unlock What’s Next: The Splunk Cloud Platform at .conf25

In just a few days, Boston will be buzzing as the Splunk team and thousands of community members come together ...