"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Nikita posted a discussionCount failures and success via transaction
Hi,I'm a new in Splunk so sorry for the stupid questions.I want to calculate failures in logs.For example we have request log and response log."request" OR ("fail" OR "response") |transaction startsWith=("request") endsWith=("fail" OR "response") maxpause=5s keepevicted=false maxspan=25s id |eval Failure=if(searchmatch("fail"),1,0)| eval Success=if(searchmatch("response"),1,0) | stats count(Failure) as FailureCount, count(Success) as SuccessCount | table FailureCount SuccessCountThat query…See More
list all tags or tag cloud
Wondering if its possible to view all tags, or even a tag cloud from within the splunkweb interface?
Part 1 of this is a question, part 2 is probably an idea for future?
While the command-line junkies can just view the tags.conf file, I think it would be helpful for a less technical user to view a tag cloud (hierarchical if possible) such that:
(tagA)
(tagAA) (tagAB)
(tagAAA) (tagABA)
..etc
And the user could click on a tag and it would return all results pertaining to it.
Thanks!
Part 1 of this is a question, part 2 is probably an idea for future?
While the command-line junkies can just view the tags.conf file, I think it would be helpful for a less technical user to view a tag cloud (hierarchical if possible) such that:
(tagA)
(tagAA) (tagAB)
(tagAAA) (tagABA)
..etc
And the user could click on a tag and it would return all results pertaining to it.
Thanks!
Views: 5
© 2012 Created by Michael Wilde.
