We are building a distributed system that uses extensive logging to capture events, and will be using the logs to determine certain events have occurred.
I have been tasked with creating a query that will review logs that contain the following data
when a user logs on
when they start a piece of work
when they finish a piece of work
when they start the next piece of work
when the log off
The idea is to calculate the “down” times between pieces of work. Assume that each of the above events will be captured as a separate log item.
What is the best way to approach this problem using the standard Druid features ?
Thanks in advance !