I am trying to filter errors that happen based on a given precondition. So say my logs have an error message like this "client returned error : -1" We know that this error could happen for a few different reasons. One of the reasons could be that the server closed the connected around the time that we got this error. This is evident from this particular line in the logs "server closing..." How do I write a filter that would show me those -1 errors only if the "server closing..." happened within( before or after doesn't matter) a minute of the former? I have tried using join but that hasn't worked for me.
Please sign in to leave a comment.