Thanks for the answer I was getting 0 results for "Incident Count", "Task Count", Vacation and Training.
But when i renamed "Task Name" to tast_name and used that then it started working fine.
Thank u thanks a lot for the query
Now i have another column called effort where i have effort mentioned in hours. and for each employee i want to calculate the sum of that effort only that too where task_name has INC* and TASK* in it and display in the output as "totaltickteffort" how do i do that ???
source="EFFORT TRACKER REQUESTED.csv" host="BDC6-LX-6021DXD" index="level3" sourcetype="effort_tracker" | rename "Task Name" as task_name
|stats count(eval(match(task_name,"INC*"))) as "Incident Count" count(eval(match(task_name,"TASK*"))) as "Task Count" count(TaskID) as "Total Count" count(eval(match(task_name,"Vacation*"))) as "Vacations" count(eval(match(task_name,"T|training*"))) as "Training" sum(Effort) as "Total Effort" sum(eval(if(task_name like "INC%",B,null()))) as sumofinc sum(eval(if(task_name like "TASK%",B,null()))) as sumoftask sum(B) as totalticketeffort by EmployeeGddLoginName
currntly am using above query but not getting any results columns getting created with blank values
... View more