Splunk Search

Is there a way to sample resulting events from a transaction?

ang3loliveira
Loves-to-Learn

Hello all,

Is there a way to sample resulting events from a transaction?

Thanks!

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @ang3loliveira,

what do you mean with transaction: the "transaction" Splunk command or in ageneral a transaction log?

then what do you mean with "to sample resulting", maybe to have some few events to use as a sample?

if this is your need you could run your search and add t the end the "head 10" command (or a different number) to have a sample of your logs, for more infos see at https://docs.splunk.com/Documentation/SCS/current/SearchReference/HeadCommandOverview.

Ciao.

Giuseppe

0 Karma
Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...