Find all messages that match the value of a field in another query

Follow

Kim Birkelund

• April 28, 2017 07:26

I have a query that find all requests that take a certain amount of time. The message have a field, correlation_id, which is shared by all messages belonging to that request. Now what I want in the output are all the messages with that correlation_id. In SQL it would look something like this: SELECT * FROM tbl WHERE correlation_id in (SELECT correlation_id FROM tbl WHERE elapsed_time > 4000) Or something to that effect.

1

• 

  Mario Sanchez

  • May 09, 2017 21:32

  Kim,Great question! Engr and PM teams are currently working on a query-subquery solution that will do exactly this!See the previously submitted idea here: https://ideas.sumologic.com/ideas/SL-I-1880Feel free to vote on it. Cheers,Mario

  0

  Comment actions Permalink
• 

  Elena Lenenko

  • March 06, 2018 05:04

  Old topic, but are there any updates on that? I need exactly the same and stuck

  1

  Comment actions Permalink

Please sign in to leave a comment.