- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
How to find common errors in different log files?
![Reddi694325 Reddi694325](https://community.splunk.com/legacyfs/online/avatars/535992.jpg)
Reddi694325
Path Finder
03-13-2019
03:59 AM
In my environment I got one scenario like have to find common errors in iis log, applog,apache log and db log. How to find it
Please help me on the same
Thanks in Advance
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![nickhills nickhills](https://community.splunk.com/legacyfs/online/avatars/108467.jpg)
nickhills
Ultra Champion
03-14-2019
03:08 AM
Hi @Reddi694325
Many log types have a 'level' which is normally one of INFO/WARN/ERROR etc.
Some logs report a status code which indicates the outcome.
If you have installed the appropriate TA for your log type this should be extracted for you You need to identify those fields/tags/values and write a search to identify them.
(sourcetype=iis AND sc_status>=400) OR (sourcetype=myApp AND log_level=error)
If my comment helps, please give it a thumbs up!
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![richgalloway richgalloway](https://community.splunk.com/legacyfs/online/avatars/140500.jpg)
richgalloway
![SplunkTrust SplunkTrust](/html/@E48BE65924041B382F8C3220FF058B38/rank_icons/splunk-trust-16.png)
SplunkTrust
03-13-2019
05:50 AM
What qualifies as a "common error" in three very different logs?
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
![Reddi694325 Reddi694325](https://community.splunk.com/legacyfs/online/avatars/535992.jpg)
Reddi694325
Path Finder
03-13-2019
08:41 PM
Actually I am thinking is there any way to find by using codes like 404,500.............
three are different logs I know But code doesn't change I think.
![](/skins/images/53C7C94B4DD15F7CACC6D77B9B4D55BF/responsive_peak/images/icon_anonymous_message.png)