ravitandur
(Ravi Shanker Reddy Kourla)
July 3, 2019, 12:48pm
1
We have below Splunk query:
sourcetype=f5_access_log rescode=429 | transaction node,rescode maxevents=-1 maxpause=1s | search eventcount>1 duration > 1 | bin span=5 duration | top 100 duration
Can some one please help me in understanding transaction part of the query and how to implement the similar query in Elastic.
warkolm
(Mark Walkom)
July 5, 2019, 8:08am
2
What do the Splunk docs say about the transaction part? I don't know that a heap of people that know it would be hanging out here.
ravitandur
(Ravi Shanker Reddy Kourla)
July 8, 2019, 6:57am
3
ok let me check my self. I will update this thread after my analysis.
system
(system)
Closed
August 5, 2019, 7:10am
4
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.