Archive

How to get multiple search condition on a single query?

New Member

Hi Team

I have this requirement .Could you please help me on it .Here is my question

  1. I wanted to get result for PageUrls based on top 5 http status code. In single query I should get URL1,URL2 .... URL10 & its 500 (top 5 ),502(top 5), 503(top 5 ) w.r.t URL's
  2. With above condition - I should get the URL & its UserID but here the index is same but sourcetype is different along with condition where status code=500

Please assist me kindly on this

0 Karma
Don’t Miss Global Splunk
User Groups Week!

Free LIVE events worldwide 2/8-2/12
Connect, learn, and collect rad prizes
and swag!