Tracking transitions through multiple states in a transaction

Follow

seth mccarus

• December 03, 2019 14:59

Hi,

I'm using the `transaction` operator along with `results by flow` to get a state transition map for a certain entity type in our logs.  here's an excerpt from my results (note that I created the `summary` field via a `concat` call):

I have not found any way to merge the results for a given `conversation` value (in this case, 82970b0f-d457-405b-99cf-66deae2b5a0b).  I'd like to get a single result for each conversation, which combines all its state transitions in order, into a single state transition list for the entity.  I would then match on the specific transition paths that are of interest to me.

is this possible?  I've tried using `merge` to no avail, and can't find any other suitable operator either.

thanks,

Seth

 

1

• 

  Rick Jury

  • December 22, 2019 21:07

  have you tried using the transactionize and merge operators together?

   

  something like:

  | transactionize conversation (merge conversation takeFirst, summary join with " ") 

  0

  Comment actions Permalink
• 

  seth mccarus

  • December 23, 2019 14:55

  thanks for the suggestion, but that didn't work for me when I did try it (around the time of writing the post).  I found transactionize to work quite differently from transaction.  transactionize doesn't identify "states" the same way transaction does.  I ended up exporting my data from the transaction search and writing an external program to process the data to find the 3-state transitions I was looking for.

  0

  Comment actions Permalink

Please sign in to leave a comment.