Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Filter transactions that do not contain a certain Event?

$
0
0
I am using transaction to calculate a duration of a job. The search for the completed events is: `index="events" | transaction reference endswith="WAITING"`. Each event contains a `state` value of either "EXECUTING", "WAITING", or "COMPLETED". I want to find transactions where there is no "COMPLETED" event. Is there a way to do this?

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>