Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How can I search for the contents of a table inside of another table?

$
0
0
Hi and thanks for reading in advance, I have two tables: 1. events for status=50* on a /submissions URL endpoint, let's call this errors, and 2. events for status=200 on a /submissions URL endpoint, let's call this successes I want to find out which events occur in the errors table, but not the successes table. The particular context is we had an outage, and I'm trying to discover which events were successfully submitted at a later date, and mainly: which events haven't been submitted since the outage. How would you go about this? Thanks, fre

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>