Dashboards & Visualizations

How to show the multiple trend lines for the job

aditsss
Motivator

Hi Everyone,

I have the below query:

|inputlookup JOB_MDJX_CS_STATS_2_E3.csv|join type=outer JOBFLOW_ID [ inputlookup JOB_MDJX_CS_MASTER_E3.csv ]|where Environment="E3"|eval Run_date1="20".RUNDATE2|eval Run_Date=strptime(Run_date1,"%Y%m%d")
|eval nowdate=relative_time(now(), "-2d@d")|fieldformat nowdate=strftime(nowdate,"%d/%b/%Y")
|fieldformat Run_Date=strftime(Run_Date,"%d/%b/%Y")|where Run_Date==nowdate|stats sum(JOB_EXEC_TIME) as TotalExecTime by JOBFLOW_NAME |eval TotalExecTime=round(TotalExecTime,2)

I am getting result like below

JOBFLOW NAME                                            TotalExecutionTime

MA_005AO_GPCC_Inq_01_MC               1133.00

COMM_090AI_Market_Preference_TF  956.00

I am displaying it as a trend. Attached the screenshot for the same:

Currently it is showing as one JobFlowName and its total execution time then second JobFowName and its  total execution time.

I want to show multiple trends in that panel. Like this job "MA_005AO_GPCC_Inq_01_MC " I want to show the complete trend for this with Date on X axis.

Similarly for second Job.

Can someone please guide me on this.

Labels (3)
0 Karma
Get Updates on the Splunk Community!

Splunk Observability for AI

Don’t miss out on an exciting Tech Talk on Splunk Observability for AI! Discover how Splunk’s agentic AI ...

[Puzzles] Solve, Learn, Repeat: Dereferencing XML to Fixed-length events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Stay Connected: Your Guide to December Tech Talks, Office Hours, and Webinars!

What are Community Office Hours? Community Office Hours is an interactive 60-minute Zoom series where ...