Hi Team,
I am creating a pie chart based on eventtype. For my one of the application logs, I have two logs for one unique request. So, I have used transaction to find out duration, but now the problem is I can't create eventtype on transaction. Could you please suggest an alternate?
Please let me know if any further detail required.
I have search like below on which I want to create an eventtype:
host="prod-ep-*" | transaction GUID,Thread_Name,transType maxevents=2
Thanks
Nikunj
Do you already have an eventtype for one of the events in the transaction? I think that should be carried over into the resulting transaction . Maybe something as simple as basing it off of the sourcetype of one of the events.
Can you provide sample data of the logs as well as how you're extracting each sourcetype? (inputs, props, & transforms if applicable)