Search for failed not completed transaction

[astepanov]

I need to find transactions that failed to complete.
Transaction go across 4 systems, from front-end to back-end system and I need to find such transactions that failed to complete or lost on their way from 1 to 4 system.

Thank you.

[hexx · Accepted solution]

You'll want to use the keepevicted = true option for the transaction command and use the closed_txn field to differentiate failed transactions from successful ones.

Consult this Splunk Answer for more details.