"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
The dojo of Splunk. Learn, share, teach, mentor.
Videos
Latest Activity
Nikita posted a discussionCount failures and success via transaction
Hi,I'm a new in Splunk so sorry for the stupid questions.I want to calculate failures in logs.For example we have request log and response log."request" OR ("fail" OR "response") |transaction startsWith=("request") endsWith=("fail" OR "response") maxpause=5s keepevicted=false maxspan=25s id |eval Failure=if(searchmatch("fail"),1,0)| eval Success=if(searchmatch("response"),1,0) | stats count(Failure) as FailureCount, count(Success) as SuccessCount | table FailureCount SuccessCountThat query…See More
Beth Mills's Page
Gifts Received
Beth Mills has not received any gifts yet
Latest Activity
Michael Wilde left a comment for Beth Mills"If there's anything i can help with.. feel free to reach out."
Beth Mills left a comment for Michael Wilde"Hi Michael,
Thanks! I'm working with Maverick right now. We're still in the POC stage. I've got a hard sell on my hands as there are certain paradigms I'm trying to get people to look past.
-Beth"
Michael Wilde left a comment for Beth Mills"Welcome Beth... i've been on vacation for the last week and enamored with 4.0... going to post a few more blogs and some additions to the forums. Feel free to post any questions etc.. i can probably answer them (or find someone who…"
Profile Information
- Are you an existing splunk user?
- Licensed
- What do you do for your day job?
- Vault Manager
Comment Wall (2 comments)
- At 10:48pm on August 17, 2009, Michael Wilde said…
- Welcome Beth... i've been on vacation for the last week and enamored with 4.0... going to post a few more blogs and some additions to the forums. Feel free to post any questions etc.. i can probably answer them (or find someone who will).
Michael Wilde
Splunk Ninja.
- At 9:26pm on August 18, 2009, Michael Wilde said…
- If there's anything i can help with.. feel free to reach out.
© 2012 Created by Michael Wilde.
