Hi all,
I'm trying to generate a timechart wich expose execution duration of a file. I almost succeed but i'm not able to generate an X axis with tiimestamp visible. Is it possible ?
index="saplogs" sourcetype=SAPCARBOOKING source="CARBOOKING.*.log"
| stats min(_time) as start max(_time) as end by source
| eval duration=end-start
| eval start=strftime(start, "%Y-%m-%d %H:%M:%S")
| eval end=strftime(end, "%Y-%m-%d %H:%M:%S")
| stats avg(duration) as Duration by end, source
| rename end as "End of processing date"
In stats line i sort by end date and source. Because i want to see the source concerned by the duration field.
Thank you for your help.
↧