我在kibana看到这样的信息持续了5秒钟:
Date, Message, TraceId
Dec 10, 2020 @ 10:49:50.285 New request start http://somehost/path1 7ec708ab153e644f
Dec 10, 2020 @ 10:49:51.179 New request end http://somehost/path1 7ec708ab153e644f
Dec 10, 2020 @ 10:49:52.285 New request start http://somehost/path2 1e090982aeb026a3
Dec 10, 2020 @ 10:49:54.285 New request start http://somehost/path3 b880dfa9c4fd39ad
Dec 10, 2020 @ 10:49:53.179 New request end http://somehost/path3 b880dfa9c4fd39ad
Dec 10, 2020 @ 10:49:54.349 New request start http://somehost/path4 65184024b220dd0c
如何筛选记录以仅查看“new request start”行,这些行没有与“traceid”匹配的“new request end”?
例如,对于上面的行,我希望看到结果:
Dec 10, 2020 @ 10:49:52.285 New request start http://somehost/path2 1e090982aeb026a3
Dec 10, 2020 @ 10:49:54.349 New request start http://somehost/path4 65184024b220dd0c
1条答案
按热度按时间zhte4eai1#
你可以
按traceid分组
只取一个按日期排序的结果,或在“消息”字段中用“开始”筛选1个结果
以下是一些示例:
答案是:
或者更好,您可以使用过滤器:
答案是: