Skip to main content
Sumo Logic

5.1 Find related events in more than one data source

Problem

An intrusion event or a hardware error might show up in access, application, and other logs. You need to trace the event across sources.

Solution

Use the sessionize operator:

sessionize

Discussion

The trace operator, transactionize operator, and transaction operator each handle different aspects of this problem.