Hello, I have application which ends specific kind of log. Every log have a jobId field and additional information" returned: 1" or "returned: 0". For one jobId program can return a lot of "returned: 1" and only one "returned: 0" logs. I want to get dashboard for daily count of jobId, but I want to exclude jobId number, when one of logs contain "returned: 1". I write something like that: $env$ $project$ "jobId" AND NOT "returned: 0" | timechart span=24h dc(jobId) but this only exclude logs, where is only "returned : 0" for one jobId. Is there possibility to get this dashboard?
... View more