Comparing Frequency of Different Logs

Comments

1 comment

  • Avatar
    Vishal Choudhary

    Hi Sarah,

    Thanks for your question. Based on my understanding, I believe you will need a Transaction operator here. This operator allows one to analyse related logs in sequence forex: if you have a user that login and logout you can track the sequence of login and logout. It requires two main ingredients:
    >transactionID or uniqueId to group related logs.
    >Mapping/Parsing from a log message to a state.

    Here is documentation that explains the operator in detail. Please go through it and try to implement it in your requirement. Let me know if you have any questions:

    https://help.sumologic.com/05Search/Search-Query-Language/Transaction-Analytics/Transaction-Operator

    Regards,
    Vishal

    0
    Comment actions Permalink

Please sign in to leave a comment.