"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Nikita posted a discussionCount failures and success via transaction
Hi,I'm a new in Splunk so sorry for the stupid questions.I want to calculate failures in logs.For example we have request log and response log."request" OR ("fail" OR "response") |transaction startsWith=("request") endsWith=("fail" OR "response") maxpause=5s keepevicted=false maxspan=25s id |eval Failure=if(searchmatch("fail"),1,0)| eval Success=if(searchmatch("response"),1,0) | stats count(Failure) as FailureCount, count(Success) as SuccessCount | table FailureCount SuccessCountThat query…See More
Encountered the following error while trying to update: In handler 'savedsearch': Argument "action.summary_index." is not supported by this handler
Hi,
While trying to save a very simple search I ran into this:
Encountered the following error while trying to update: In handler 'savedsearch': Argument "action.summary_index." is not supported by this handler.
I recently upgraded to free version 4.1 (Windows 64bit), so i suspect this is an Issue of this version.
I get the same error for any search i try to save. Even one like this...
[search2]
search = * | head 10
I tried adding a line like
action.summary_index = 0
but that did not solve it.
Any help is appreciated. Thanks,
Marcelo
Views: 42
Replies to This Discussion
-
Permalink Reply by Marcelo Finkielsztein on -
Amend:
I installed Splunk free version 4.0.9 build 74233 on another server and got the same error.
Any ideas !?
© 2012 Created by Michael Wilde.
