i have date like below. User                        Points gain a                                 1004 b                                  900 c                                  850 d                                  700 e                                  600 i want to create new column based on Points gain like if User got > 1000 then Expert, 850 to 1000 then Master, 700 to 850 average , <700 Slow    Thanks ... View more

We have a query where we need the EndDate to be the StartDate of the previous entry for all particular values in a row     ... View more

i got results for my search like below. I got all counts by using eventstas. i need to show Total points by DisplayName wise group by level. if i use stats then i got Total but i need to kee all values and show only Displayname by group by level.   rank    DisplayName   Bcount  Lcount ... View more

i need to create Rank based on Events that will occur dynamically. i've tried this but not able to do index="abc" source="bcd" |eval ComputerName=upper(ComputerName) |join ComputerName [|savedsearch Computers_By_Product productName="DELL"] | eval title = replace(title,"{","") | eval title = replace(title,"}","") | rename title as signature | join type=left signature [search index="abc" source="dce" earliest=1 latest=now() | stats dc(id) as IDs by signature] | eventstats dc(DateTime) as issueCount by ComputerName | eventstats dc(ID) as fixCount by ComputerName |sort 0 - issueCount |streamstats current=f window=1 values(issueCount) as Prev|eval Rank_filled=if(prev=issueCount,0,1) | accum Rank_filled|table ComputerName issueCount Rank_filled i need rank like  issueCount Rank 2 1 2 1 1 2 1 2 thanks ... View more

I have a date like 2020-06-08 06:39:49.0 I need to extract workweek from it. Thanks in advance. ... View more

i need to convert my sql query into splunk by dbx query could some one help me ? here is my query. SELECT * FROM [Systems] AS D RIGHT JOIN (SELECT * FROM [Users] WHERE ProductName = 'Platform' ) AS C ON D.ComputerName = C.ComputerName Thnaks in advance ... View more

my data Name spent income A 10 20 B 20 40 C 30 60 A 40 80 B 50 100 Outcome have to come Name spent income A 50 100 B 70 140 C 30 60 ... View more

ComputerName Events Rank ABC 320 1 BCD 229 2 CDE 120 3 need to create rank Column based on Event count ... View more