I am pretty new to Splunk, but pretty hooked already 🙂
After creating some handy reports, I now have a hard time creating a stacked chart telling me who assigned calls to the assignees. I searched manuals as-well as the answers section, but was not able to find a working solution.
I created a search line which gives me the needed data:
CallUpdateAction="assigned" QueueMan="" AND Analyst=""
The question now is, how do I get the data stacked like the image (not enough Karma) at my https dropbox link dl.dropboxusercontent.com/u/20804642/Splunk_Forum/Call_Assignment_Chart.png
I hope you can give me some directions on this matter!
Thanks,
Niels
This should work:
CallUpdateAction="assigned" | chart count over Analyst by QueueMan
This should work:
CallUpdateAction="assigned" | chart count over Analyst by QueueMan
Fulfilled with shame I say thank you!