I am attempting to perform a count/eval of the TransactionStatus=success across the following 3 sources for each Segment(0-4) for the purpose of a dashboard. I know that I could easily do 3 separate searches and have 3 different charts, but I don't really want to do that.
dst = index=dst, SegmentID(0-3),sourcetype=dst(only 1 possibility), TransactionStatus=sucess, TraceUID
mtl = index=mtl, NO Segment(All are assigned to Segment0), sourcetype=mtl(only 1 possibility), TransactionStatus=sucess, traceUID
aps = index=main, Segment(0-3), sourcetype=txn(38 possibilities total), TransactionStatus=sucess, TraceUID
Across all 3 sources there is 1 value that exists in all 3 sources and that is the TraceUID/traceUID field. I will dedup on this field
... View more