Splunk Search
Highlighted

about transaction maxspan.. millisecond unit

Engager

Is it impossible ?

  • | transaction maxspan=50ms session_id

above search command not working..

Please help me~!

Tags (2)
0 Karma
Highlighted

Re: about transaction maxspan.. millisecond unit

Legend

No, the maxspan argument only takes integer values of seconds (s), minutes (m), hours (h) or days (d).

http://docs.splunk.com/Documentation/Splunk/latest/SearchReference/Transaction

Highlighted

Re: about transaction maxspan.. millisecond unit

Engager

quick reply.. Thank you for your effort.

0 Karma