Quantcast
Channel: Latest Questions on Splunk Answers
Viewing all articles
Browse latest Browse all 13053

How do I access to a value for event and event-1

$
0
0

Hi,

I need to display value (string) of a field depending on the value of this field in previous event. Something like this :

if previous_event.field = "toto" then display current_event.field else display "anomaly" I've found something interesting with "transatcion" by I can't achieve to do this.

Any help is welcome.

Thanks in advance.

Regards


Viewing all articles
Browse latest Browse all 13053

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>