Splunk Search

Better way to track sequence of web logs other than transaction command

jwalzerpitt
Influencer

I am using the transaction command to follow the sequence of a successful WordPress login (and the URIs the user hits after the login) and what I'm finding is that the endswidth is hard to pin down because of re-direction or no re-direction based on the site. So, I have the following logic:

A method of POST with a status of 302 followed by a method of a GET within one second to the same site/IP

Would a search based on transaction be needed for that, or is there a less taxing way to search for that sequence?

Thx

0 Karma

ketannagpal
New Member

You can use the stats command.

0 Karma

jwalzerpitt
Influencer

Would I be looking to leverage earliest/latest?

Thx

0 Karma
Get Updates on the Splunk Community!

Introducing the Splunk Community Dashboard Challenge!

Welcome to Splunk Community Dashboard Challenge! This is your chance to showcase your skills in creating ...

Get the T-shirt to Prove You Survived Splunk University Bootcamp

As if Splunk University, in Las Vegas, in-person, with three days of bootcamps and labs weren’t enough, now ...

Wondering How to Build Resiliency in the Cloud?

IT leaders are choosing Splunk Cloud as an ideal cloud transformation platform to drive business resilience,  ...