Thank you and much appreciated your solution. Splunk-service-now add-on issue in our environment. Hence i couldn't able to implement recommendations.   ... View more

@tscroggins I executed above query. still i am getting closed tasks in my results.  I dont want to display any tasks that has already been closed. Could you please assist me. index="servicenow" sourcetype="snow:sc_task" sys_class_name="sc_task"AND dv_assignment_group="NETWORK-L3" AND (dv_assigned_to="XXXXXXXXXX" OR dv_assigned_to="XXXXXXXXXX" OR dv_assigned_to="XXXXXXXXXX" OR dv_assigned_to="XXXXXXXXXX") AND (dv_short_description!="XXXXXXXXXX" OR dv_short_description!="XXXXXXXXXX") | fillnull value="UnAssigned" dv_assigned_to | stats latest(*) as * by dv_number | search dv_state!="Closed Complete" dv_state!="Closed Incomplete" ... View more

Below values are the values i am getting. Closed Complete Closed Incomplete Closed Skipped Open Pending Work in Progress ... View more