Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

Correlating fields and printing some fields .

$
0
0
Logger 1: has StartId: 1234, and commitCode as 101. Logger 2: has EndId: 1234(which is same as start ID), WebOrderID: W789, Ccode: 111(which is Commitcode) Logger 3: has EndID: 1234, sectionID: 4567 I want to display StartID,commitCode from Logger 1, sectionID from Logger3 and WebOrderID and Ccode from Logger 2. I am doing that only for StartIds that meet this condition "fraud-decision.received" "lineItemOverrides" NOT "lineItemOverrides=()" NOT commitCode=null

Viewing all articles
Browse latest Browse all 47296

Trending Articles