"How are these transactions linked together... by a field called "ID"? If so.. just build them with the field ID, and then use one of the MV commands to extract a field with success or failure in it. Paste some samples and…"
""Spunky"...Thanks for joining Splunk Ninja. Ask hard questions, we'll try to answer. Suggest videos, we'll try to shoot them... contribute if you can.
Michael Wilde
Splunk Ninja"