How do I Search logs with two different logger ?

pratapfriends00 · ‎01-10-2019

I have a scenario in which I have two logger one is for "writing to database" and the other is "successfully completed". Am trying for query which you give result when the first loggers is present but the second logger is missing to set alert when it fails to write to DB.

kmorris_splunk · ‎01-10-2019

Can you provide a sample of each event? Is there a common value that helps you tie the "writing to database" to the "successfully completed"? You could possibly use transaction command but will need more info from you regarding the events?

How do I Search logs with two different logger ?

Aligning Observability Costs with Business Value: Practical Strategies

Mastering Data Pipelines: Unlocking Value with Splunk

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0

Are you a member of the Splunk Community?

How do I Search logs with two different logger ?

Aligning Observability Costs with Business Value: Practical Strategies

Mastering Data Pipelines: Unlocking Value with Splunk

Splunk Up Your Game: Why It's Time to Embrace Python 3.9+ and OpenSSL 3.0