Quantcast
Channel: Questions in topic: "splunk-enterprise"
Viewing all articles
Browse latest Browse all 47296

How do I get my transaction search to use the first start event as the starting point?

$
0
0
Hi, i have log file and i am using startswith Starting Dispatcher and endswith completed. but some times in the log there are 2 Starting dispatcher, so i want the transaction to consider first start , so that i will get correct duration. appreciate help. Thanks, Jai

Viewing all articles
Browse latest Browse all 47296

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>