Jobs Running on daily basis.
Events like-
1) "Job_Name": "XYZ", "status":" Start"
2) "Job_Name": "XYZ", "status":" SUCCESS"
3) "Job_Name": "XYZ", "status":" Failure"
Need to calculate and display the job run time and status on dashboard for multiple days/runs.
Below query works well for single run but for multiple run runtime is not getting calculated.
search to fetch both "job started" and "job finished" events
| eval eventType=if(searchmatch("job started"),"Start","End")
| chart values(_time) over Job_Name by eventType
| eval jobduration=End-Start
