Splunk Search

Better way to track sequence of web logs other than transaction command

jwalzerpitt
Influencer

I am using the transaction command to follow the sequence of a successful WordPress login (and the URIs the user hits after the login) and what I'm finding is that the endswidth is hard to pin down because of re-direction or no re-direction based on the site. So, I have the following logic:

A method of POST with a status of 302 followed by a method of a GET within one second to the same site/IP

Would a search based on transaction be needed for that, or is there a less taxing way to search for that sequence?

Thx

0 Karma

ketannagpal
New Member

You can use the stats command.

0 Karma

jwalzerpitt
Influencer

Would I be looking to leverage earliest/latest?

Thx

0 Karma
Get Updates on the Splunk Community!

Automatic Discovery Part 1: What is Automatic Discovery in Splunk Observability Cloud ...

If you’ve ever deployed a new database cluster, spun up a caching layer, or added a load balancer, you know it ...

Real-Time Fraud Detection: How Splunk Dashboards Protect Financial Institutions

Financial fraud isn't slowing down. If anything, it's getting more sophisticated. Account takeovers, credit ...

Splunk + ThousandEyes: Correlate frontend, app, and network data to troubleshoot ...

 Are you tired of troubleshooting delays caused by siloed frontend, application, and network data? We've got a ...