Answer by warren for How to write a splunk query to get the result for every hour in a day?

Perhaps timechart will suffice?

index='xyz' sourcetype='abc' status='completed'
| timechart span=1h count by status

from User warren – Stack Overflow https://stackoverflow.com/questions/77001574/how-to-write-a-splunk-query-to-get-the-result-for-every-hour-in-a-day/77004668#77004668
via IFTTT