Hi @bhaskar5428,
let me understandd: you need an alert (or a report) that checks with a predefined frequency (e.g. one day) youe events and every time sends a message with "Success" or Failure", is this correct?
if this is your need, you should schedule a report or an alert like this:
index=your_index
| stats count
| append [| makeresults | eval count=0 | fields count ]
| stats sum(count) AS total
| eval status=if total=8,"Success","Failure")
| table status
if you defined an alert, you can pass the status value as a token to the content of the eMail.
Ciao.
Giuseppe
