Splunk Search

Looking for date wise Incidents resolved count by each user

Gousa
New Member

i am trying to pull incidents resolved by each user in date wise . can any one help me how to form the below table with count

User Name10/4/202110/5/202110/6/2021Grand Total
AAAA 3 3
BBBBB2  2
CCCCC31 4
DDD1  1
Labels (3)
0 Karma

PickleRick
SplunkTrust
SplunkTrust

Use timechart with span of one day by user to get a timeseries. Then transpose the results. Finally you can do addtotals.

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...