Is there a way to sample resulting events from a transaction?

ang3loliveira — Sun, 15 May 2022 19:34:09 GMT

Hello all,

Thanks!

Re: Sampling resulting events from a transaction

gcusello — Sat, 14 May 2022 05:04:33 GMT

what do you mean with transaction: the "transaction" Splunk command or in ageneral a transaction log?

then what do you mean with "to sample resulting", maybe to have some few events to use as a sample?

if this is your need you could run your search and add t the end the "head 10" command (or a different number) to have a sample of your logs, for more infos see at https://docs.splunk.com/Documentation/SCS/current/SearchReference/HeadCommandOverview.

Ciao.

Giuseppe