Jobs Running on daily basis. Events like- 1) "Job_Name": "XYZ", "status":" Start" 2) "Job_Name": "XYZ", "status":" SUCCESS" 3) "Job_Name": "XYZ", "status":" Failure" Need to calculate and display the job run time and status on dashboard for multiple days/runs. Below query works well for single run but for multiple run runtime is not getting calculated. search to fetch both "job started" and "job finished" events | eval eventType=if(searchmatch("job started"),"Start","End") | chart values(_time) over Job_Name by eventType | eval jobduration=End-Start
... View more