How to use 'AND' keyword in Transaction command

[sasank]

Hi,

I want to use 'AND' keyword either in startsWith or in endsWith.

<<search>> | transaction startsWith="some text" AND "some other text" endswith="some text" AND "some other text"

Is this possible?

[Manasa_401]

Hi @sasank 

According to the documentation, it is possible. Have a look at the below link.

https://docs.splunk.com/Documentation/Splunk/9.0.3/SearchReference/Transaction#Filter_string_options 

If this helps, karma would be appreciated.

Thanks,

Manasa