Hello all,
I am facing an issue below while trying to get the result to add in the dashboard.
Here I am trying to get the count for the servers based on their Overall_Status.
| My search |
|search Overall_Status="Success" OR Overall_Status="Failed" OR Overall_Status="Skipped" OR Overall_Status="NA"
I will now need to get the result as below.
Success Failed Skipped NA
8 4 2 2
This could then be added to the dashboard. Can you please guide me through this.
@srinivas_gowda
Try this
YOUR_SEARCH
|stats count by Overall_Status | transpose 0 header_field="Overall_Status" | fields - column | rename Success as "Successfull", NA as "Failed to complete(NA)", Failed as "Unsuccessfull(Failed)" | table Successfull "Unsuccessfull(Failed)" Skipped "Failed to complete(NA)"
Thanks
KV
▄︻̷̿┻̿═━一
If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.
Try by adding this.
|stats count by Overall_Status | transpose 0 header_field="Overall_Status" | fields - column
KV
Hello, this worked. Thank you. Can you please also let me know how the values could be renamed here? for eg Success as "Successfull", NA as "Failed to complete"
Also, when I try the query given by you is there a way to place the result as needed. Below is the result from the query.
Failed NA Skipped Success
4 | 12 | 1 | 8 |
Can I rearrange the given result as below:
Successfull Unsuccessfull(Failed) Skipped Failed to complete(NA)
8 4 1 12
Thank you
@srinivas_gowda
Try this
YOUR_SEARCH
|stats count by Overall_Status | transpose 0 header_field="Overall_Status" | fields - column | rename Success as "Successfull", NA as "Failed to complete(NA)", Failed as "Unsuccessfull(Failed)" | table Successfull "Unsuccessfull(Failed)" Skipped "Failed to complete(NA)"
Thanks
KV
▄︻̷̿┻̿═━一
If any of my reply helps you to solve the problem Or gain knowledge, an upvote would be appreciated.