I need to create the following reports, but I have difficulty making the proper queries (i using splunk and SideViews). Answered Calls ("removing as source ID" / except from number = 1234,5687,4444,4321) are entered in the chart as Answered. Currently this filter below meets me partially, but I can not see the way I need, I want to show only 01 column with the Total. =========================== cdr_events | stats first (callId) as callId list (callingPartyNumber) as callingPartyNumber list (duration) as duration list (durationStr) as durationStr list (eventtype) as eventtype by globalCallID_callId globalCallID_callManagerId globalCallId_ClusterID | search duration = 0 (eventtype = "incoming_call") | chart dc (callId) over callingPartyNumber | sort 0 callingPartyNumber =========================== ... View more

I need to remove these two columns in the report extraction, I already removed the values in the "search" for these columns, but still they are displayed. I need remove "loginUserID" and "huntPilotDN" ; My search: cdr_events ( (callingPartyGroup="Ramais" OR originalCalledPartyGroup="Ramais" OR finalCalledPartyGroup="Ramais") ) ( (callingPartySubgroup="SSZ" OR originalCalledPartySubgroup="SSZ" OR finalCalledPartySubgroup="SSZ") ) duration>0 | fillnull duration value="0" | fillnull callingPartyUnicodeLoginUserID originalCalledPartyLoginUserID finalCalledPartyLoginUserID value="(none)" | eval {type}_duration=duration | eval {type}_callId=callId | calculate_all_internal_parties | stats values(loginUserID) as loginUserID values(huntPilotDN) as huntPilotDN dc(incoming_callId) as incoming dc(outgoing_callId) as outgoing dc(internal_callId) as internal dc(callId) as total sum(incoming_duration) as incoming_duration sum(outgoing_duration) as outgoing_duration sum(internal_duration) as internal_duration sum(duration) as total_duration values(partyName) as name by number | lookup groups number as number output name group subgroup | search * ( group="Ramais" ) ( subgroup="SSZ" ) | fields_for_internal_parties ... View more

Hello, I would like to create 03 reports, but I have difficulties. What happens, I need to create: - Calls that are not answered by extension; - Calls that are answered by extension successfully; Calls made by extension successfully; Unsuccessful extension calls; But I notice that I can't filter by time, because there are links   00:00:00, so I can't create a report using just the "status" of the call because it usually has "normal clean call". It is possible to make a query in the way that, define that the calls "received" by time, and consider that with the value 00:00:00 s; Att, Richard ... View more