https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430451#M123093 <P>Actually I am thinking is there any way to find by using codes like 404,500.............</P> <P>three are different logs I know But code doesn't change I think. </P> Thu, 14 Mar 2019 03:41:12 GMT Reddi694325 2019-03-14T03:41:12Z https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430449#M123091 <P>In my environment I got one scenario like have to find common errors in iis log, applog,apache log and db log. How to find it </P> <P>Please help me on the same </P> <P>Thanks in Advance </P> Wed, 13 Mar 2019 10:59:32 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430449#M123091 Reddi694325 2019-03-13T10:59:32Z https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430450#M123092 <P>What qualifies as a "common error" in three very different logs?</P> Wed, 13 Mar 2019 12:50:28 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430450#M123092 richgalloway 2019-03-13T12:50:28Z https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430451#M123093 <P>Actually I am thinking is there any way to find by using codes like 404,500.............</P> <P>three are different logs I know But code doesn't change I think. </P> Thu, 14 Mar 2019 03:41:12 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430451#M123093 Reddi694325 2019-03-14T03:41:12Z https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430452#M123094 <P>Hi @Reddi694325 <BR /> Many log types have a 'level' which is normally one of INFO/WARN/ERROR etc.<BR /> Some logs report a status code which indicates the outcome.</P> <P>If you have installed the appropriate TA for your log type this should be extracted for you You need to identify those fields/tags/values and write a search to identify them.</P> <PRE><CODE>(sourcetype=iis AND sc_status&gt;=400) OR (sourcetype=myApp AND log_level=error) </CODE></PRE> Thu, 14 Mar 2019 10:08:10 GMT https://community.splunk.com/t5/Splunk-Search/How-to-find-common-errors-in-different-log-files/m-p/430452#M123094 nickhills 2019-03-14T10:08:10Z