https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37938#M8578 <P>I didn't get the trick with adding a max to work alone, but when I added "| eval _txn_orphan=NULL" just before my second transaction it works like a charm.<BR /> I haven't tried without the max's.</P> Mon, 28 Sep 2020 17:32:13 GMT las 2020-09-28T17:32:13Z https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37934#M8574 <P>I have tried over and over to apply two transaction commands to my search each with a different Field and it will show that I do have 17 or 18 matching results but it just wont display them!, I dont think Splunk supports Multiple transaction commands in a search.</P> <P>I have taken a look at the following previous asked question: <A href="http://splunk-base.splunk.com/answers/38111/connect-two-transactions">Connecting-Two-Transaction</A> and it seems no one was able to solve the issue!, I even tried the "keeporphans=true" with the transaction command and yet it shows that there are hundreds of matching results but it just wont display them!</P> Fri, 27 Apr 2012 03:07:05 GMT https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37934#M8574 Dark_Ichigo 2012-04-27T03:07:05Z https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37935#M8575 <P>I know for sure that I've used multiple transactions in searches with success a number of times. Do you have a specific issue? It's hard to solve the problem you're having without knowing any details about it <span class="lia-unicode-emoji" title=":slightly_smiling_face:">🙂</span></P> Fri, 27 Apr 2012 05:20:29 GMT https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37935#M8575 Ayn 2012-04-27T05:20:29Z https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37936#M8576 <P>I didnt want to use the transaction command twice in the first place, but I was forced to find a workaround due to the subsearch timing out issues that sadly splunk will not fix, even after setting the limits.conf to the Maximum for each subsearch stanza.</P> <P>But if these both dont work, whats the point of trying any more if I cant find an alternative solution?</P> Tue, 01 May 2012 02:30:00 GMT https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37936#M8576 Dark_Ichigo 2012-05-01T02:30:00Z https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37937#M8577 <P>I have a core bug opened on this issue, if you add in "max"'s you'll get your events to show, such as "maxspan=2" "maxevents=15". You can also pipe to a stats values(_raw) and you'll see your events. Let me know if you'd like the SPL for the issue. </P> <P>Make sure all "transactions" in the search have max's specified.</P> Tue, 01 May 2012 03:04:15 GMT https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37937#M8577 bbingham 2012-05-01T03:04:15Z https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37938#M8578 <P>I didn't get the trick with adding a max to work alone, but when I added "| eval _txn_orphan=NULL" just before my second transaction it works like a charm.<BR /> I haven't tried without the max's.</P> Mon, 28 Sep 2020 17:32:13 GMT https://community.splunk.com/t5/Splunk-Search/Using-the-transaction-command-twice-in-a-search/m-p/37938#M8578 las 2020-09-28T17:32:13Z