- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
no data after Transaction
pengium12
New Member
09-17-2021
06:44 AM
What could be reason that there are no data available after grouping using a transaction command? Before grouping using a transaction, there are data available.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
PickleRick

SplunkTrust
09-17-2021
07:15 AM
If I understand you correctly, when you do bare search it returns some even but after adding a transaction command to it, you don't get any results, right?
Are you sure you're specifying existing field with the transaction command? If you specify wrong field, you won't get any transactions.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
09-17-2021
07:14 AM
You likely have no events that meet the criteria specified in the transaction command. Please share your query and some sample events.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
pengium12
New Member
09-23-2021
08:44 AM
There are events found, But there are no data showed in the list.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

richgalloway

SplunkTrust
09-23-2021
12:17 PM
Again I ask you kindly to share the query and sample (sanitized) events.
---
If this reply helps you, Karma would be appreciated.
If this reply helps you, Karma would be appreciated.
