Re: How to use 'AND' keyword in Transaction comman... - Splunk Community

Splunk Search

Hi,

I want to use 'AND' keyword either in startsWith or in endsWith.

<<search>> | transaction startsWith="some text" AND "some other text" endswith="some text" AND "some other text"

Is this possible?

According to the documentation, it is possible. Have a look at the below link.

https://docs.splunk.com/Documentation/Splunk/9.0.3/SearchReference/Transaction#Filter_string_options

If this helps, karma would be appreciated.

Thanks,

Manasa

Get Updates on the Splunk Community!

Announcing Modern Navigation: A New Era of Splunk User Experience

We are excited to introduce the Modern Navigation feature in the Splunk Platform, available to both cloud and ...

Think Like an Architect: Introducing the Splunk Certified Cybersecurity Defense ...

In cybersecurity, defenders respond to threats. Architects design the systems that stop them. As ...

Best Practices: Splunk auto adjust pipeline queue

When you enable autoAdjustQueue in Splunk, maxSize should be understood as the queue size Splunk starts with ...