Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Transaction of two fields same data set

$
0
0
I have a search:some-search | transaction PP_Jobid | transaction JOBID This gives me what I want but I am forced to call transaction twice. Every record has "PP_Jobid" but only some records (with an individual PP_Jobid transaction) have a JOBID. I tried: some search | transaction (PP_Jobid, JOBID) But that didn't work. I even swapped the fields to JOBID,PP_Jobid to no avail. I tried: somesearch | eval PrintStream=coalesce(PP_Jobid, JOBID)|transaction PrintStream But that didn't work either . . . The basic format of the data is: RecordType;PP_Jobid;additional fields;field with JOBID embeded;other fields I use (in props) a: REPORT-job_data = data_parts And in transforms.conf [data_parts] SOURCE_KEY = Jobname REGEX = ^(?P\w+)\.(?P\w{3}\d{3})\.(?P.{6})\. Am I forced to use a dual transaction or ???? Is there a way to configure this in transactiontypes.conf ? Thanks! some (woefully incomplete) sample data: 1041;00863708;1;1 1042;00863708;1;7;108;66;;;;;;;0; 1043;00863708.0001;1;7 1040;00863708.0001;01.04.2016;08:34:50;01.04.2016;08:47:15;1;0;;0;7;7;7;0;7;0;0;;6;1;0 1041;00863708.0001;1;1 1042;00863708.0001;1;7;108;66;;;;;;;0; 1010;00888004;oce100236.oceprinting.com;HotDir;1;Hold;1;0;no;no;;01.04.2016;10:40:49;;;/$JOBINPUT_TICKETS/PDF_Duplex_LTR_DEF24V_K90_CMY90_AGA.TIC;PROD.AGA100.ACTSW0.EBM1C00001.00001.PS.RISEX1.ps.pdf;;; 1011;00888004.0001;PDF-Unity+;/u/prismapro/data/ods/files/datin/00888004_PROD.AGA100.ACTSW0.EBM1C00001.00001.PS.RISEX1.ps.pdf;9056767;1;;; 1130;00888004;oce100236.oceprinting.com;js1900_spool;PDF_Duplex_LTR_DEF24V_K90_CMY90.TIC;/u/prismapro/cfg/jobinput/bin/pjm;/u/prismapro/data/hotdir/js1900_spool/PROD.AGA100.ACTSW0.EBM1C00001.00001.PS.RISEX1.ps.pdf;9056767;01.04.2016;10:40:49;successful 1030;00888004;HotDir;AFP;PROD.AGA100.ACTSW0.EBM1C00001.00001.PS.RISEX1.ps.pdf;Hold;1;0;01.04.2016;10:40:50;1 1030;00888004.0001;HotDir;AFP;/u/prismapro/data/hotdir/js1900_spool/PROD.AGA100.ACTSW0.EBM1C00001.00001.PS.RISEX1.ps.pdf;Hold;1;0;01.04.2016;10:40:50;1 1010;00888013;oce100236.oceprinting.com;HotDir;1;Hold;1;0;no;no;;01.04.2016;10:40:59;;;/$JOBINPUT_TICKETS/PDF_Duplex_LTR_DEF24V_K90_CMY90_AGA.TIC;PROD.AGA100.ACTSW0.EFM1C00001.00002.PS.RISEX1.ps.pdf;;; 1011;00888013.0001;PDF-Unity+;/u/prismapro/data/ods/files/datin/00888013_PROD.AGA100.ACTSW0.EFM1C00001.00002.PS.RISEX1.ps.pdf;165958922;1;;; 1130;00888013;oce100236.oceprinting.com;js1900_spool;PDF_Duplex_LTR_DEF24V_K90_CMY90.TIC;/u/prismapro/cfg/jobinput/bin/pjm;/u/prismapro/data/hotdir/js1900_spool/PROD.AGA100.ACTSW0.EFM1C00001.00002.PS.RISEX1.ps.pdf;165958922;01.04.2016;10:40:59;successful 1010;00888018;oce100236.oceprinting.com;HotDir;1;Hold;1;0;no;no;;01.04.2016;10:41:04;;;/$JOBINPUT_TICKETS/PDF_Duplex_LTR_DEF24V_K90_CMY90_AGA.TIC;PROD.AGA100.ACTSW0.ETM1C00001.00003.PS.RISEX1.ps.pdf;;; 1011;00888018.0001;PDF-Unity+;/u/prismapro/data/ods/files/datin/00888018_PROD.AGA100.ACTSW0.ETM1C00001.00003.PS.RISEX1.ps.pdf;3660869;1;;; 1130;00888018;oce100236.oceprinting.com;js1900_spool;PDF_Duplex_LTR_DEF24V_K90_CMY90.TIC;/u/prismapro/cfg/jobinput/bin/pjm;/u/prismapro/data/hotdir/js1900_spool/PROD.AGA100.ACTSW0.ETM1C00001.00003.PS.RISEX1.ps.pdf;3660869;01.04.2016;10:41:04;successful 1030;00888018;HotDir;AFP;PROD.AGA100.ACTSW0.ETM1C00001.00003.PS.RISEX1.ps.pdf;Hold;1;0;01.04.2016;10:41:05;1 1030;00888018.0001;HotDir;AFP;/u/prismapro/data/hotdir/js1900_spool/PROD.AGA100.ACTSW0.ETM1C00001.00003.PS.RISEX1.ps.pdf;Hold;1;0;01.04.2016;10:41:05;1 1010;00888027;oce100236.oceprinting.com;HotDir;1;Hold;1;0;no;no;;01.04.2016;10:41:14;;;/$JOBINPUT_TICKETS/PDF_Duplex_LTR_DEF24V_K90_CMY90_AGA.TIC;PROD.AGA101.ACTSW1.ETM1C00001.00001.PS.RISEX1.ps.pdf;;; 1011;00888027.0001;PDF-Unity+;/u/prismapro/data/ods/files/datin/00888027_PROD.AGA101.ACTSW1.ETM1C00001.00001.PS.RISEX1.ps.pdf;1322601;1;;; 1130;00888027;oce100236.oceprinting.com;js1900_spool;PDF_Duplex_LTR_DEF24V_K90_CMY90.TIC;/u/prismapro/cfg/jobinput/bin/pjm;/u/prismapro/data/hotdir/js1900_spool/PROD.AGA101.ACTSW1.ETM1C00001.00001.PS.RISEX1.ps.pdf;1322601;01.04.2016;10:41:14;successful 1010;00888032;oce100236.oceprinting.com;HotDir;1;Hold;1;0;no;no;;01.04.2016;10:41:19;;;/$JOBINPUT_TICKETS/PDF_Duplex_LTR_DEF24V_K90_CMY90.TIC;PROD.NAP101.ACTSW2.ETM1C00001.00001.PS.RISEX1.pdf;;; 1011;00888032.0001;PDF-Unity+;/u/prismapro/data/ods/files/datin/00888032_PROD.NAP101.ACTSW2.ETM1C00001.00001.PS.RISEX1.pdf;2691538;1;;; 1130;00888032;oce100236.oceprinting.com;js1900_spool;PDF_Duplex_LTR_DEF24V_K90_CMY90.TIC;/u/prismapro/cfg/jobinput/bin/pjm;/u/prismapro/data/hotdir/js1900_spool/PROD.NAP101.ACTSW2.ETM1C00001.00001.PS.RISEX1.pdf;2691538;01.04.2016;10:41:19;successful 1030;00888013;HotDir;AFP;PROD.AGA100.ACTSW0.EFM1C00001.00002.PS.RISEX1.ps.pdf;Hold;1;0;01.04.2016;10:41:24;1

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>