I have a transaction that pairs events based on three fields. Is it possible to then filter the results so that it only shows the paired events if at least one of the events has the field ‘Type’ containing the character ‘X’?
Hey,
Sure you can. Transaction combines all events of a transaction into one event, so if you append a | search Type=*x*
after the transaction, it should do what you want.
Hey,
Sure you can. Transaction combines all events of a transaction into one event, so if you append a | search Type=*x*
after the transaction, it should do what you want.
Perfect, thanks.