Hello,
Example scenario: Two seperate messages containing an exact ID, This ID is parsed with GROK and a field for it created. ID’s are always random but if they are the same, when they are the same they always appear one after another. It is an http response and request log but in seperate messages.
Any thoughts on creating a single messages from these messages? Or any other way of correlating request and response logs from two different messages?
Best Regards.