Consider the following search:
index=web sourcetype=access_combined
The log shows several events that share the same JSESSIONID value (SD470K92802F117). View the events as a group.
From the following list, which search groups events by JSESSIONID?

Question

Consider the following search:index=web sourcetype=access_combinedThe log shows several events that share the same JSESSIONID value (SD470K92802F117). View the events as a group.From the following list, which search groups events by JSESSIONID?

Hans Walter Katzengruber · Accepted Answer

index=web sourcetype=access_combined | transaction JSESSIONID | search SD470K92802F117

Hans Walter Katzengruber · Answer

index=web sourcetype=access_combined | highlight JSESSIONID | search SD470K92802F117

Hans Walter Katzengruber · Answer

index=web sourcetype=access_combined SD470K92802F117 | table JSESSIONID

Hans Walter Katzengruber · Answer

index=web sourcetype=access_combined JSESSIONID <SD470K92802F117>

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 243 - SPLK-1002 discussion

Suggested answer: B

0 comments