Splunk Search

Transactions which are overlapping

1234testtest
Path Finder

Hourly Job 1245 started


Hourly Job 1246 started


Hourly Job 1246 completed

--
Hourly Job 1245 completed

How to group overlapping transaction like this,1245 and 1246 are transactionids.

Tags (1)
0 Karma

martin_mueller
SplunkTrust
SplunkTrust

The transaction command doesn't mind overlapping, it just groups events with identical transaction IDs together.

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Synthetic Monitoring - Resolved Incident on Detector Alerts

We’ve discovered a bug that affected the auto-clear of Synthetic Detectors in the Splunk Synthetic Monitoring ...

Video | Tom’s Smartness Journey Continues

Remember Splunk Community member Tom Kopchak? If you caught the first episode of our Smartness interview ...

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud?

3-2-1 Go! How Fast Can You Debug Microservices with Observability Cloud? Learn how unique features like ...