hi I have total 7 components installed. 3 have failed to install and 4 are successfully installed... I want to take a pie chart like how much time was taken for each components whether it's installed successfully or failed. i want to show both in a pie chart or any other charts. I have my sample data below. Please provide some ideas to solve this. I tried with this search: source="status log1.txt" |chart avg(_time) over result by components am getting x-axis as mill-nano-sec and y-axis as components results... and am not getting a pie chart 2015-02-21 03:17:10 , pid=12,technology=JAVA, result="successfully installed" 2015-02-21 03:35:10 , pid=13,technology=Coherence, result="successfully installed" 2015-02-21 03:56:10 , pid=14,technology=Nosql, result="failed to installed" 2015-02-21 04:09:10 , pid=15,technology=splunk, result="successfully installed" 2015-02-21 04:13:10 , pid=16,technology=weblogic,result="successfully installed" 2015-02-21 04:24:10 , pid=17,technology=OEP, result="failed to installed" 2015-02-21 04:29:10 , pid=18,technology=kazzing, result="successfully installed" ... View more

This is my data.. now i want to take chart for time vs each command .. if it is possible have to show duration between start and end time of each command.. plz help me .. 03-25-2015 03:04:31.189, cmd_name=cmd1(Start_time_of_if) 03-25-2015 03:09:31.189, cmd_name=cmd1(end_time_of_if) 03-25-2015 03:12:31.189, cmd_name=cmd2(Start_time_of_if) 03-25-2015 03:17:31.189, cmd_name=cmd2(end_time_of_if) 03-25-2015 03:20:31.189, cmd_name=cmd3(Start_time_of_grep) 03-25-2015 03:24:31.189, cmd_name=cmd3(end_time_of_grep) 03-25-2015 03:27:31.189, cmd_name=cmd4(Start_time_of_if) 03-25-2015 03:32:31.189, cmd_name=cmd4(end_time_of_if) 03-25-2015 03:38:31.189, cmd_name=cmd5(Start_time_of_sed_command) 03-25-2015 03:42:31.189, cmd_name=cmd5(end_time_of_sed_command) 03-25-2015 03:49:31.189, cmd_name=cmd6(Start_time_of_if) 03-25-2015 03:55:31.189, cmd_name=cmd6(End_time_of_if) Thank u ... View more