Hello, am new to Splunk and this is my 1st post. I have logs that contain the request header information and need it to be in a particular order when the request is relayed to the server. How do I query and group logs by the order of header issued?
some example of headers expected "headers": {"host": "..", "accept-encoding": "..", "cache-control": "..", "referer": "..", "true-client-ip": "..", "user-agent": "..", "via": "..", "x-forwarded-for": "..", "x-forwarded-port": "443","x-forwarded-proto": "https", "connection": "keep-alive", "cookie": ".." }
... View more