Hello all,
Is there a way to sample resulting events from a transaction?
Thanks!
Hi @ang3loliveira,
what do you mean with transaction: the "transaction" Splunk command or in ageneral a transaction log?
then what do you mean with "to sample resulting", maybe to have some few events to use as a sample?
if this is your need you could run your search and add t the end the "head 10" command (or a different number) to have a sample of your logs, for more infos see at https://docs.splunk.com/Documentation/SCS/current/SearchReference/HeadCommandOverview.
Ciao.
Giuseppe