Hi friends,
I am trying to get total resolved incidents, open incident and total incidents each day. I am getting the information from same source and Index. How do I assign resolved, open and total to separate variable and get the count of each and percentage too?
Please suggest
Thanks in Advance
| bin _time span=1d
| stats count as total count(eval(state=="OPEN")) as open count (eval(state=="RESOLVED")) as resolved by _time