https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/567444#M197751 <P>If I understand you correctly, when you do bare search it returns some even but after adding a transaction command to it, you don't get any results, right?</P><P>Are you sure you're specifying existing field with the transaction command? If you specify wrong field, you won't get any transactions.</P> Fri, 17 Sep 2021 14:15:50 GMT PickleRick 2021-09-17T14:15:50Z https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/567422#M197738 <P>What could be reason that there are no data available after grouping using a transaction command? Before grouping using a transaction, there are data available.</P> Fri, 17 Sep 2021 13:44:31 GMT https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/567422#M197738 pengium12 2021-09-17T13:44:31Z https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/567443#M197750 <P>You likely have no events that meet the criteria specified in the <FONT face="courier new,courier">transaction</FONT> command.&nbsp; Please share your query and some sample events.</P> Fri, 17 Sep 2021 14:14:41 GMT https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/567443#M197750 richgalloway 2021-09-17T14:14:41Z https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/567444#M197751 <P>If I understand you correctly, when you do bare search it returns some even but after adding a transaction command to it, you don't get any results, right?</P><P>Are you sure you're specifying existing field with the transaction command? If you specify wrong field, you won't get any transactions.</P> Fri, 17 Sep 2021 14:15:50 GMT https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/567444#M197751 PickleRick 2021-09-17T14:15:50Z https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/568273#M198027 <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="pengium12_1-1632411854437.png" style="width: 400px;"><img src="https://community.splunk.com/t5/image/serverpage/image-id/16143i03AD47C20D162577/image-size/medium?v=v2&amp;px=400" role="button" title="pengium12_1-1632411854437.png" alt="pengium12_1-1632411854437.png" /><span class="lia-inline-image-caption" onclick="event.preventDefault();">pengium12_1-1632411854437.png</span></span></P><P>&nbsp;</P><P>There are events found, But there are no data showed in the list.</P> Thu, 23 Sep 2021 15:44:27 GMT https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/568273#M198027 pengium12 2021-09-23T15:44:27Z https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/568302#M198035 <P>Again I ask you kindly to share the query and sample (sanitized) events.</P> Thu, 23 Sep 2021 19:17:11 GMT https://community.splunk.com/t5/Splunk-Search/no-data-after-Transaction/m-p/568302#M198035 richgalloway 2021-09-23T19:17:11Z