Dashboards & Visualizations

How to show the multiple trend lines for the job

aditsss
Motivator

Hi Everyone,

I have the below query:

|inputlookup JOB_MDJX_CS_STATS_2_E3.csv|join type=outer JOBFLOW_ID [ inputlookup JOB_MDJX_CS_MASTER_E3.csv ]|where Environment="E3"|eval Run_date1="20".RUNDATE2|eval Run_Date=strptime(Run_date1,"%Y%m%d")
|eval nowdate=relative_time(now(), "-2d@d")|fieldformat nowdate=strftime(nowdate,"%d/%b/%Y")
|fieldformat Run_Date=strftime(Run_Date,"%d/%b/%Y")|where Run_Date==nowdate|stats sum(JOB_EXEC_TIME) as TotalExecTime by JOBFLOW_NAME |eval TotalExecTime=round(TotalExecTime,2)

I am getting result like below

JOBFLOW NAME                                            TotalExecutionTime

MA_005AO_GPCC_Inq_01_MC               1133.00

COMM_090AI_Market_Preference_TF  956.00

I am displaying it as a trend. Attached the screenshot for the same:

Currently it is showing as one JobFlowName and its total execution time then second JobFowName and its  total execution time.

I want to show multiple trends in that panel. Like this job "MA_005AO_GPCC_Inq_01_MC " I want to show the complete trend for this with Date on X axis.

Similarly for second Job.

Can someone please guide me on this.

Labels (3)
0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...