Splunk Search

help with search

manmohanpv
New Member

I do log successful entry and exit of an api that's getting called along with customerId. How do i find the customerId of the api call which did not exit successfully.

For example, every request will log the Enter. If any request error out, it'll not log the Exit

INFO com.xyz.service Enter GetMeSomeRequest customerid=123456
INFO com.xyz.service Exit GetMeSomeRequest customerid=123456

How do i find customerId for those calls which did not log "Exit GetMeSomeRequest customerid=123456"

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Demo Day: Strengthen Your SOC with Splunk Enterprise Security 8.1

Today’s threat landscape is more complex than ever. Security operation centers (SOCs) are overwhelmed with ...

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...