I am trying to create a report for displaying number of times, replacement of printer supply unit in 1 year, by calculating when the supply level is zero, by IP. Is there any one to help on this?

[sabithanitg]

create a report for displaying number of times, replacement of printer supply unit in 1 year, by calculating when the supply level is zero, and by IP.

[aweitzman · Accepted solution]

Without knowing what your data looks like, this suggestion will make some obvious assumptions about your events:

source=printersupplyunits | stats count(eval(supplylevel=0)) as count by IP

Where printersupplyunits is the source of your events, IP is the IP address of each event, and supplylevel represents the supply level at the time of the event.