About cx233alvin

cx233alvin · ‎04-01-2018

Thanks @niketnilay and @lguinn for your replies. I was able to do it based on your suggestions. Similar to @lguinn, I just sorted the rows by location and loginTime/ txnDateTime. Then, I used streamstats to get the last login, logout and employeeID. I used eval to check whether the sale transaction is within the login and logout time (set 1 if yes, otherwise 0). Finally, I used sum to get the total number of transactions per teller.

cx233alvin · ‎03-18-2018

You can determine which employee performed the sale if: a. the date and timestamp of sale is within the log-in and logout of employee; AND b. the location of sale is equal to location of employee. No. there is only one employee assigned at specific time and location. It is not possible to attribute 1 sale to multiple employees.

cx233alvin · ‎03-18-2018

They are from 2 different indices.

cx233alvin · ‎03-14-2018

Hi there! Just want to ask if possible to execute a non-equijoin in Splunk? A non-equijoin (in SQL) joins two table using non-equal operator such as <, >, BETWEEN-AND etc. I have two tables: Employees Staff ID | Log-in | Log-out | Location 1001 | 12-30-2017 11:30:00 | 12-30-2017 23:30:00 | LDP1 1002 | 12-30-2017 12:30:00 | 12-30-2017 20:30:00 | LDP3 Sales Txn Date Time | Location | Txn Type 12-30-2017 11:48:17 | LDP1 | Sale I want to count the number of transactions done by each staff based on their location, log-in and log-out time Example: Staff ID | Date |Location | Count of Txns 1 | 12-30-2017 | LDP 1 | 345 2 | 12-30-2017 | LDP 2 | 416 Thanks in advance.

Posts	4
Solutions	0
Karma Given	2
Karma Received	1
Member Since	‎03-14-2018

Online Status	Offline
Date Last Visited	‎06-05-2020 02:04 AM

Join in Splunk

Re: Join in Splunk

Re: Join in Splunk

Re: Join in Splunk

Join in Splunk

Are you a member of the Splunk Community?

Join in Splunk

Re: Join in Splunk

Re: Join in Splunk

Re: Join in Splunk

Join in Splunk