Splunk Search

Better way to track sequence of web logs other than transaction command

jwalzerpitt
Influencer

I am using the transaction command to follow the sequence of a successful WordPress login (and the URIs the user hits after the login) and what I'm finding is that the endswidth is hard to pin down because of re-direction or no re-direction based on the site. So, I have the following logic:

A method of POST with a status of 302 followed by a method of a GET within one second to the same site/IP

Would a search based on transaction be needed for that, or is there a less taxing way to search for that sequence?

Thx

0 Karma

ketannagpal
New Member

You can use the stats command.

0 Karma

jwalzerpitt
Influencer

Would I be looking to leverage earliest/latest?

Thx

0 Karma
Get Updates on the Splunk Community!

Modernize your Splunk Apps – Introducing Python 3.13 in Splunk

We are excited to announce that the upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform ...

New Release | Splunk Cloud Platform 10.1.2507

Hello Splunk Community!We are thrilled to announce the General Availability of Splunk Cloud Platform 10.1.2507 ...

🌟 From Audit Chaos to Clarity: Welcoming Audit Trail v2

🗣 You Spoke, We Listened  Audit Trail v2 wasn’t written in isolation—it was shaped by your voices.  In ...