Splunk Search

Find th duration of the transaction of the particular task

splunkpoornima
Communicator

hi i used the below query..

--|transaction Taskaction startswith=START endswith=Succeeded|table Taskaction duration

i got the duration for each and every task..as

TaskAction duration

task1 12

task2 4.2

task3 13

task4 76

if i want to filter task1 and its duration..how to do that

plz help

Tags (1)
0 Karma
1 Solution

Ayn
Legend

Are you asking about how to use the search command?

... | transaction Taskaction startswith=START endswith=Succeeded|table Taskaction duration | search TaskAction=task1

Also, if this is what you were after, may I suggest that you take the Splunk introduction tutorial.

View solution in original post

Ayn
Legend

Are you asking about how to use the search command?

... | transaction Taskaction startswith=START endswith=Succeeded|table Taskaction duration | search TaskAction=task1

Also, if this is what you were after, may I suggest that you take the Splunk introduction tutorial.

Get Updates on the Splunk Community!

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

Splunk is officially part of Cisco

Revolutionizing how our customers build resilience across their entire digital footprint.   Splunk ...

Splunk APM & RUM | Planned Maintenance March 26 - March 28, 2024

There will be planned maintenance for Splunk APM and RUM between March 26, 2024 and March 28, 2024 as ...