Jobs Running on daily basis. Events like- 1) " Job_Name " : "XYZ ", " status " : " Start " 2) " Job_Name " : "XYZ ", " status " : " SUCCESS " 3) " Job_Name " : "XYZ", " status " : " Failure " Need to calculate and display the job run time and status on dashboard for multiple days/runs. Below query works well for single run but for multiple run runtime is not getting calculated. search to fetch both "job started" and "job finished" events | eval eventType=if(searchmatch("job started"),"Start","End") | chart values(_time) over Job_Name by eventType | eval jobduration=End-Start
... View more