Is there a way to sample resulting events from a transaction?

[ang3loliveira]

Hello all,

Is there a way to sample resulting events from a transaction?

Thanks!

[gcusello]

Hi @ang3loliveira,

what do you mean with transaction: the "transaction" Splunk command or in ageneral a transaction log?

then what do you mean with "to sample resulting", maybe to have some few events to use as a sample?

if this is your need you could run your search and add t the end the "head 10" command (or a different number) to have a sample of your logs, for more infos see at https://docs.splunk.com/Documentation/SCS/current/SearchReference/HeadCommandOverview.

Ciao.

Giuseppe