The venerable old-skool Splunk forums are now closed. Feel free to search for old content here, but new posts are no longer supported.
Instead, please visit the thriving community at answers.splunk.com to ask and answer questions about your Splunk deployment and how to get the most out of it.
Forums: Posted by wcdtest2
| Topic | Author | Replies | Latest Post |
|---|---|---|---|
|
How to add a not eventtype clause in a transaction pattern
In: SplunkGeneral
(Not tagged)
pattern=A, B*, C does not properly extract the patterns it clubs multiple events together. In such case ...
Hi, I'm making a transaction coupling 3 events together A,B,C. Now I want that i should be able to ... |
6
|
40 months ago... |