The numbers in the panels are the same when trying different time ranges as I mentioned in the above search query ... View more

selected the date from 1 jan 2024 to 2 jan 2024 ---------------------------------------------------------------- index="bsds_gans" earliest=1704096000 latest=+1d pfor IN (*) test IN (*) name IN (*) ckb IN (*) vrsion IN (*) id IN (*) location IN (*) group IN (*) | eval pfor=upper(pfor) | eval _time = start_time | eval WW=strftime(_time, "%V.%w") | eval name=mvindex(split(context,"."),1) | search name !="*Case Setup*" | eval name=mvindex(split(name,".PSPV"),0) | eval id=mvindex(split(name," - "),0) | search id IN (*) | eval main=mvindex(split(name," - "),1) | search main IN (*) | stats count(eval(sta="FIL")) as fail_count, count(eval(sta="PASS")) as pass_count, count(eval(like(sta,"LOCKED%"))) as not_run_count by name,id -------------------------------------------------------------------- selected date is from 1jan 2024 to 13 jan 2024 index="bsds_gans" earliest=1704096000 latest=+1d pfor IN (*) test IN (*) name IN (*) ckb IN (*) vrsion IN (*) id IN (*) location IN (*) group IN (*) | eval pfor=upper(pfor) | eval _time = start_time | eval WW=strftime(_time, "%V.%w") | eval name=mvindex(split(context,"."),1) | search name !="*Case Setup*" | eval name=mvindex(split(name,".PSPV"),0) | eval id=mvindex(split(name," - "),0) | search id IN (*) | eval main=mvindex(split(name," - "),1) | search main IN (*) | stats count(eval(sta="FIL")) as fail_count, count(eval(sta="PASS")) as pass_count, count(eval(like(sta,"LOCKED%"))) as not_run_count by name,id ----------------------------------------------------------------------- selected  for last 7 days index="bsds_gans" earliest=-7d@h latest=+1d pfor IN (*) test IN (*) name IN (*) ckb IN (*) version IN (*) id IN (*) location IN (*) group IN (*) | eval pfor=upper(pfor) | eval _time = start_time | eval WW=strftime(_time, "%V.%w") | eval name=mvindex(split(context,"."),1) | search name !="*Case Setup*" | eval name=mvindex(split(name,".PSPV"),0) | eval id=mvindex(split(name," - "),0) | search id IN (*) | eval main=mvindex(split(name," - "),1) | search main IN (*) | stats count(eval(sta="FIL")) as fail_count, count(eval(sta="PASS")) as pass_count, count(eval(like(sta,"LOCKED%"))) as not_run_count by name,id ... View more

Thanks for your support its worked for me. ... View more

This is my raw data, I have to calculate the last 3 months executions date month countries Jobs type November AUS Execution October JER Execution September IND Execution August ASI Execution ... View more

thanks,  I got expected  output ... View more

yes, this picture is related to query  ... View more

After using this command for a duration the values are split in the 1st pick, so I want to sum all the duration values into a single line like in pick 2 | stats count(eval(status="FAIL")) as fail_count, sum(duration) as hours by ww, kit, endtime | eval hours=tostring(hours,"duration")          ... View more

After removing the seconds from my query, I tried with below query | stats count(eval(status="FAIL")) as fail_count, sum(duration) as hours by ww, kit, endtime | eval hours=tostring(hours,"duration") I got the output like this  But i want to sum up all the values, i tried with this command not getting  any values | eval hours=round(sum(hours),2)   ... View more

the output actually I need in the 2 Fig. Thanks a lot, @ITWhisperer for helping me out with this query its working fine ... View more

Great Thanks, @ITWhisperer Its working fine but  Is there any chance actually i want like this      ... View more

You're asking  about this search query right index="gitxapixation" platform !=null provision_type IN (*) site_location IN (*) | eval end_time=strftime(end_time, "%m/%d/%y %H:%M:%S") | eval WW=strftime(start_time, "%V.%w") | eval _time = start_time | eval WW=strftime(_time, "%V.%w") | eval scenario_name=cas(provision_type="BIOS",mvindex(split(context,"."),1),provision_type="IFWI",mvindex(split(context,"."),1),provision_type="OS",mvindex(split(context,"."),1)) | eval scenario_name=coalesce(scenario_name,name) | rename scenario_name as Testcase_id | stats count(eval(status="FAIL")) as fail_count, count(eval(status="PASS")) as pass_count, count(eval(like(status,"BLOCKED%"))) as not_run_count by WW,kit,provision_type,platform,subproject | eval scenario_status=case(fail_count>0, "FAIL", not_run_count>0, "NOT RUN", fail_count=0 AND not_run_count=0, "PASS") | eval IFWI=case(provision_type="IFWI",scenario_status) | eval OS=case(provision_type="OS",scenario_status) | eval BIOS=case(provision_type="BIOS",scenario_status) | rename platform as Platform subproject as AutomationType | table WW,Platform,kit,AutomationType,IFWI,BIOS,OS ... View more

Is there any logic can we hide or delete, all 3cloums having N/A values, because there is no data present.   ... View more

@ITWhisperer Thanks a lot,  it worked for me as I expected    ... View more

Tried but its not showing the percentage symbol ... View more

Thank you very much! worked perfectly. ... View more

Thanks, i made it using stats count by sub group (using sub search) its working. ... View more