Splunk Search

How to calculate pending ticket count?

pavan_kumar
Explorer

Hi,

I was created 2 dashboards for pending tickets and completed tickets. when pending tickets are  completed, need to decrease the count in the pending tickets. Any help on this Thanks in advance. 

When I have closed the tickets the completed count was increasing, but the pending count is not decreasing. please help on this.

Thanks & Regards 

Labels (1)

gcusello
SplunkTrust
SplunkTrust

Hi @pavan_kumar,

are you speaking of two differen dashboards or two panels of the same dashboard?

Anyway, you could schedule a  frequent refresh your panels so the data are frequently updated.

Could you share your searches or the code of your dashboard?

Ciao.

Giuseppe

0 Karma

pavan_kumar
Explorer

Hi @gcusello , Thanks for your response.

2 panels in same dashboard

index="cloud" (assigne="pavan-001" OR assigne="pavan-002" OR assigne="pavan-003") (task_name="linux_install" OR task_name="linux_uninstall" OR task_name="windows_install" OR task_name="linux_uninstall") | table _time,pipeline_id,env,assignee,task_name,status | dedup table _time,pipeline_id,env,assignee,task_name,status 

In the above query 

panel-1: it is for pending tickets which status is "pending"

panel-2: it is for completed tickets which status is "completed"

My issue is: when ticket raised by user it is added to "pending " panel automatically, when the ticket status was changed to "complete" the count need to decrease in "pending" panel and need to increase count to "complete" panel.

 

 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @pavan_kumar,

panels cannot be automatically refreshed when the data is changed, but you can configure a refresh frequency  for you panels (e.g. every 5 minutes) to have a situation updated to the last 5 minutes.

you could also add this information in the subtitle so the users know at what time the situation is updated.

If you have many users that need an updates situation, you could schedule a report, updated e.g. every 5 minutes and in the panels you could display the updated report every 5 minutes.

Ciao.

Giuseppe

0 Karma

pavan_kumar
Explorer

My issue is need to decrease count in "pending" panel count dynamically, after close the ticket.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @pavan_kumar,

as I said, panels cannot be automatically refreshed when the data is changed, but you can configure a refresh frequency  for you panels (e.g. every 5 minutes or lower) to have an updated .

Ciao.

Giuseppe

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...