Splunk Search

Service now data calculated percentage of P1,P2,P3 but when ever there is no P1 or P2 or P3 tickets need to show as NA

999balaji9
Loves-to-Learn

Hi All, 

I need help with the below requirement. I am getting data from the service now. I calculated the percentage date wise and showed like the results will be as shown below 

 

DATE                                Severity            Percentage

7/02/2021                        P1                        100 

7/02/2021                        P2                        100 

7/02/2021                        P3                        100 

8/02/2021                        P1                        100 

8/02/2021                        P2                        100 

8/02/2021                        P3                        100 

For the above results, I am good. But I would like to show whenever there is no values P1 or P2 or P3 I would like to display as NA 

Kindly help me 

Thanks & Regards,
Balaji 

Labels (7)
0 Karma

venkatasri
SplunkTrust
SplunkTrust

@999balaji9  As i see your query you won't get empty/null entries for severity, are you getting empty that you want to change it NA?

(or) any given day if there are no incidents then you still want to display the date and set Severity = NA?

0 Karma

999balaji9
Loves-to-Learn

if the values are in severity are showing as P1, P2, Or P3 then I could able to resolve it. But in the current scenario some time I am getting P3 only for one date for the remaining two I need to showcase as P1 value as NA and P2 value as NA

0 Karma

venkatasri
SplunkTrust
SplunkTrust

@999balaji9 Can you share the original query written to produce the output?

0 Karma
Get Updates on the Splunk Community!

See just what you’ve been missing | Observability tracks at Splunk University

Looking to sharpen your observability skills so you can better understand how to collect and analyze data from ...

Weezer at .conf25? Say it ain’t so!

Hello Splunkers, The countdown to .conf25 is on-and we've just turned up the volume! We're thrilled to ...

How SC4S Makes Suricata Logs Ingestion Simple

Network security monitoring has become increasingly critical for organizations of all sizes. Splunk has ...