I am trying to run an equivalent of the below query in splunk search, please help.
SELECT CONCAT(run, '.', tag) as file_name,time_at as end_time FROM log WHERE message = 'processing' and msg_type = 'COMPLETE' order by id desc
index=history source=mysql-pipe sourcetype=pipeline_logs|eval file_name=run_name.".".tag |eventstats time_at as start_time where like(message,"processing") AND like(message,"COMPLETE") |table file_name start_time
Looks like there's a typo in your question. like(message, "COMPLETE")
likely should be like(msg_type,"COMPLETE")
.