Hi @lalitha , Check for field values with leading/trailing spaces and try something like this to get your result. | makeresults count=8
| streamstats count
| eval dv_number = case(count=1, 1023, count=2, 39, count=3, 31, count=4, 234,count=5,112,count=6,462,count=7,627,count=8, 998 )
| eval dv_assigned = case(count=1 OR count=3, "James", count=2 OR count=4, "Sam",count=5 OR count=7, "Morkel",count=6 ,null(), count=8, "Stacy")
|fillnull value="--Unassigned--" dv_assigned
| eval dv_state = case(count=1, "Closed Complete", count=3, "Pending", count=2 OR count=4, "Closed Incomplete",count=5 OR count=7, "Closed Skipped",count=6, "Work in Progress", count=8, "Open")
| eval status = if(like(trim(dv_state),"Closed%"),"Closed", trim(dv_state))
| where status!="Closed"
... View more