Didnt get u but This is the query which i built up so far which is capturing time difference in HH:MM:SS in stats view but i want to display the same duration in chart as well index=music Job=* | stats values(host) as Host values(Job) as Job, earliest(_time) as start_time latest(_time) as end values(x) as "File Name" by oid | eval Duration=(end-start_time) | eval end = strftime(end,"%m-%d-%Y %H:%M:%S") | eval start_time = strftime(start_time,"%m-%d-%Y %H:%M:%S") | rename opid as OPID, start_time as "Start Time", end as "End Time" | chart list(Duration) as Duration by "Start Time" | fieldformat Duration=tostring(round(Duration, 0), "Duration") Current stats output: i want to display like this
... View more