We have two source categories:
Category #1. Lists transmissions believed to be sent from one system
Category #2. Lists transmissions known to be received by the other system
They both include a common ID.
When things go well, all ID's in category #1 will also be found in category #2, usually on the same day.
If an ID ever appears in category #1 but then does NOT appear in category #2, then I want a query or report to highlight that fact, as it represents a transmission that failed to arrive at the destination.
Can this be done in Sumo Logic?
Please sign in to leave a comment.